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Big Sale! 

The Book of Softkeys (volume 1-3) 

for only $1 each* 



*plus postage & handling 



Technical Reference Books 

foronly$5each* 

*plus postage & handling (iimited copies) 

Applesoft Tutorial w/disk by Apple (1) 

Apple n Instant Pascal Reference Manual by Apple (2) 

Apple He Technical Reference Manual by Apple (3) 

Inside the Apple lie by Gary B. Little (1) 

Programming the 65816 by WiUiam Labiak (2) 
Apple Ilgs Hardware Reference by Apple (49) 

Apple Ilgs ProDOS 16 Reference w/ disk by Apple (31) 

The Snapshot (NMI) Copycard for only $25 

See page 22 for more information 
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COMPUTIST is published by SoftKey 
Publishing. Address all advertising inquiries 
to: 

COMPUTIST 

Advertisiitg Department 

33821 East Orville Road 

Eatonville, WA 98328 

(206) 832-3055 

Mail all RDEX letters to: 

COMPUTIST 

Apple-RDEX or IBM-RDEX 

33821 East Orville Road 

Eatonville, WA 98328 

• COMPUTIST does NOT purchase editorial 
material. The entire editorial content consists 
of information submitted to COMPUTIST 
for publication in the shared interests of all 
COMPUTISTs. 

• Unsolicited material (manuscripts, letters to 
the editor, sof±eys, A.P.T.s, playing tips, 
questions, etc.) are assumed to be submitted 
as letters-to-the-RDEX-editor for publication 
with all and exclusive rights Iselonging to 
COMPUTIST. 

• Entire contents copyright 1990 by SoftKey 
Publishing . All rights reserved. Copying done 
for other than personal or internal reference 
(without express written permission from the 
publisher) is prohibited. 

• The editorial staff assume no liability or 
responsibility for the products advertised in 
this newsletter. Any opinions expressed by 
the authors are not necessarily those of 
COMPUnST magazine, its staff or SoftKey 
Publishing. 

SUBSCRIPTIONS: Rates (for 8 issues): 

U.S $24 Canada/Mexico $34 

U.S. 1st Class $34 Other Foreign $54 

• Send subscription inquiries to: 

COMPUTIST 
Subscription Department 
33821 East Orville Road 
EatonvUle, WA 98328 

• Domestic Dealer rates: Call (206) 832-3055 
for more information. 

• Change Of Address: Please allow 4 weeks 
for change of address to take effect On postal 
form 3576 supply your new address and your 
most recent address label. When we receive 
your notice of change of address, we will send 
you a acknowledgement card. If you do not 
receive the acknowledgement card after 2 
weeks, send another notice or call us direct. 

Issuesmisseddue tonon-receipt of change 
of address may be acquired at the regular 
back issue rate. 

We are not responsible for missing issues 
90 days after mailing date. If you do not 
receive an issue at the usual time each month, 
please call or write. 

Apple® is t tradcnuik of Ap|de Computsn. IBM« U iIb IBM 
, tzmdemaik. 



Readers Data Exchange 

New COMPUTIST readers using Apple lis 
are advised to read this page carefully to avoid 
frustration when attempting to follow a sofikey or 
entering the programs printed in this issue. 
Wiiat is a softltey, anyway? 

Sofikey is a term which we coined to describe 
aprocedurethatremoves, or at least circumvents, 
any copy-protection on a particular disk. Once a 
softkey procedure has been performed, the re- 
sulting backup copy can usually be copied by the 
normal copy programs (for example: COPY A, 
on the DOS 3.3 System Master disk). 

Commands and control keys 

Commands which a reader is required to 
perform are set apart by being in boldface and on 
a separate line. The return key must be pressed 
at the end of every such command imless other- 
wise specified. Control characters are preceeded 
by "Ctrl". An example of both is: 
6 Ctrl P 

Type 6. Next, place one finger on the Ctrl key 
and then press P. Don't forget to press the return 
key. 



Other special combination keypresses include 
Ctrl reset and open-apple Ctrl reset. In the for- 
mer, press and hold down the Ctrl key then press 
the reset key. In the latter, press and hold down 
both Ctrl and open-apple then press reset . 

Software recommendations 

The Starter Kit contains most of the programs 
that you need to "Get started". In addition, we 
recommend that you acquire the following: 

• Applesoft program editor such as "Global 
Program Line Editor (GPLE)". 

•Assembler such as "Merlin/Big Mac". 

•Bit-copy program such as "Copy II Plus", 
"Locksmith" or "Essential Data Duplicator". 

•Word-processor (such as AppleWorks). 

•"COPYA", "FID" and "MUPHN" from the 
DOS 3.3 System Master disk. 

Super lOB and Controllers 

This powerful deprotection utility (in the 
COMPUTIST Starter Kit) and its various Con- 
trollers are used in many softkeys. (It is also on 
each Super lOB Collection disk.) 

Reset into the Monitor 

Softkeys occasionally require the user to stop 
the execution of a copy-pwotected program and 
directly enter the Apple' s system monitor. Check 
the following list to see what hardware you will 
need to obtain this ability. 

Laser 128: Your ROM includes a forced 
jump to the monitor. Press Ctrl return reset. 

Apple II+, //e, compatibles: 1 ) Place an Inte- 
ger BASIC ROM card in one of the Apple slots. 
2) Use a non-maskable interrupt (NMI) card such 
as Replay or Wildcard. 

Apple II+, compatibles: 1) Install an F8 
ROM with a modified reset-vector on the 
computer's motherboard as detailed in the 
"Modified ROM 's" article (COMPUTIST #6 or 
Book Of Softkeys IE ) or the "Dual ROM's" 
article (COMPUTIST #19). 

Apple lie. He: Install a modified CD ROM on 
the computer's motherboard that changes the 
open-apple Ctrl reset vector to point to the moni- 
tor. (This will void an Apple lie -warranty since 
you must open the case to install it.) 

Apple //gs: If you have the 2.x ROM, there is 
a hidden Classic Desk Accessory (CD A) that al- 
lows you to enter the monitor. In order to install 
the new CDA, you should enter the monitor 
(CALL -151) before running any protected pro- 
grams and press # return . This will turn on two 
hidden CDAs, Memory Peeker and Visit Moni- 
tor. Thereafter press openapple Ctrl esc to go to 
the Desk Accessories menu. Select Visit Monitor 
and there you are. Use Ctrl Y to exit. 

Recommended literature 

•Apple n Reference Manual (or He, lie, etc.) 

•DOS 3.3 & ProDOS manual 

•Beneath Apple IX)S & Beneath Apple Pro- 
DOS, by Don Worth and Pieter Lechner, from 
Quality Software 

Typing Applesoft programs 
BASIC programs are printed in a format that 
is designed to minimize errors for readers who 
key in these programs. If you type: 

10HOME:REMCLEAR SCREEN 

The LIST will look like: 

10 HOME : REM CLEAR SCREEN 

Applesoft inserts spaces into a program list- 
ing before and after every command word or 
mathematical operator. These spaces don't pose 
a problem except when they are inside of quotes 
or after a DATA command. There are two types 
of spaces: those that have to be keyed and those 
that don't. Spaces that must be typed appear in 
COMPUTIST as special characters (0). All other 
spaces are there for easier reading. 

NOTE: If you want your checksums to match, 
only type spaces within quotes or after DATA 
statements if they are shown as (0) charactors. 
SAVE the program atp)eriodic intervals using the 
name given in the article. All characters after a 
REM are not checked by the checksum program 
so typing them is optional. 

Typing Hexdumps 

Machine language programs are printed in 
COMPUTIST as hexdumps, sometimes also as 
source code. 

Hexdumps are the shortest and easiest format 
to type in. You must first enter the monitor: 
CALL -151 

Key in the hexdump exactly as it appears in 
the magazine, ignoring the four-digit checksum 
($ and four digits) at the end of each line. When 
finished, return to BASIC with: 
3D0G 

BSAVE the program with the filename, ad- 
dress and length parameters given in the article. 



Typing Source Code 

The source code is printed to help explain a 
program's operation. To enter it, you need an 
"Assembler". Most of the source code in older 
issues is in S-C Assembler format. If you use a 
different assembler, you will have to translate 
portions of the source code into something your 
assembler will understand. 

Computing checksums 

Checksums are 4-digit hexadecimal numbers 
which tell if you typed a program correctly and 
help you locate any errors . There are two types of 
checksums: one created by the CHECKBIN 
program (for machine language programs) and 
the other created by the CHECKSOFT program 
(for BASIC programs). Both are on the "Starter 
Kit". 

If your checksums do not match the published 
checksums then the line where the first checksum 
differs is incorrect. 

CHECKSOFT instructions : Install Checksoft 
(BRUN CHECKSOFT) then LOAD your pro- 
gram. Press & to get the checksums. Correct the 
program line where the checksums first differ. 

CHECKBIN instructions: Enter the monitor 
(CALL - 15 1 ), install Checkbin at some out of the 
way place (BRUN CHECKBIN, AS6000), and 
then LOAD your program. Get the checksums by 
typing the Starting address, a period and the 
Ending address of the file followed by a Ctrl Y . 
SSSS.EEEE Ctrl Y 

Correct the lines where the checksums differ. 

Writing to the RDEX editor 

RDEX (are-decks) stands for: Reader's Data 
Exchange. We print what you write. When you 
send in articles, softkeys, APTs, etc., you are sub- 
mitting them ioifree publication in this maga- 
zine. RDEX does not purchase submissions nor 
do we verify data submitted by readers. If you 
discover any errors, please let us know so that we 
may inform our other readers. 

Remember that your letters or parts of them 
may be used in RDEX even if not addressed to the 
RDEX editor. Correspondence that gets pub- 
lished may be edited for clarity, grammar and 
space requirements. 

Because of the great number of letters we 
receive and the ephemeral and unpredictable 
ap>pearance of our volunteer staff, any response 
to your queries will appear only in RDEX, so it 
would be more appropriate for you to present 
technical questions to the readers and ask for 
their responses which will then be placed in the 
Apple-RDEX. 

How to get a free library disk 

Whenever possible, send everything on Apple 
format (5.25" - DOS/ProIX)S or 3.5" - ProDOS) 
or IBM format (3.5") disks. Other formats are 
acceptable but there may be some delay as we 
look for someone to translate it for us. (If you use 
a 5.25" disk, when we print your letter, we will 
return your disk with the current library disk 
copied onto it.) Use whatever text editor you like, 
but tell us which one. Put a label on the disk with 



your name (or pseudonym) and address (if you 
want to receive mail). Don't reformat any pro- 
grams or include them in the text of your letter. 
Send Applesoft programs as normal Applesoft 
files and macliine language programs as normal 
binary files. We have programs to convert them 
to the proper format for printing. If you are 
sending source code files, and you are not using 
the S-C Assembler, send them as normal text 
files. 

When to include a printed letter 

Don't include hardcopy (printout) unless: 

a. You are writing about a bug or other printing 

error. 

b. You are writing to ask for help. 

c. You are answering another readers help re- 
quest. 

d. You are writing about your subscription or 
sending an order for back issues or software. 

Bugs, requests for help and answers to re- 
quests for help are bumped to the head of the line 
and go in the very next issue. All other letters are 
printed in the order that we receive them. 
Writing to get help 

When writing to request help, be sure to 
include ALL relevent information. The more in- 
formation you include, the easier it is to find a 
solution. There's an old saying that goes "A 
properly framed question includes 90% of the 
answer". 

How to get mail 

If you are interested in receiving mail from 
other readers, be sure that we have a current 
address. If you use a pen name and want to 
receive mail, we need to have your address. Our 
readers privacy is important, so we will not print 
your address unless you sp>ecifically say too. 
How to write to RDEX authors 

When writing to one of the RDEX authors. 
Write your letter and seal it in an envelope. Put 
your return address, the authors name (as it 
appears in RDEX) and the correct postage on the 
envelop*. Put this envelope into another and send 
it to RDEX. We will pjut the correct address on 
your letter and mail it for you. Check to the right 
of the authors name to see if the author is writing 
from a foreign country and includ the projjcr 
postage. 

Help Line 

TTiese readers have volunteered their time to 
help you. Please call only within the given time 
frames (corrected for your time zone). No collect 
calls. 

Jack Nissel (Disk Protection, 7- 10PM EST) 
(215)365-8160 

Electronic Bulletin Board System (BBS) 
Dave Goforth is the sysop for the Computist 
BBS. The number is: (206) 581-9292. If you 
already have a User ID# and password, sign-on 
using the User ID#. If you are anew user, it may 
take a day or so to vahdate your new ID# and 
password. 



You have a LEGAL RIGHT 

to an unlocked backup copy 

of your commercial software. 



Our editorial policy is that we do NOT condone software piracy, but we do believe that users 
are entitled to backup commercial disks they have purchased. 

In addition to the security of a backup disk, the removal of copy-protection gives the user the 
option of modifying programs to meet his or her needs. 

Furthermore, the copyright laws guararuee your right to such a DEPROTECTED backup 
copy: 

.. ."It is not an infringement for the owner of a copy of a computer p«x)gram to make or authorize 
the making of another copy or adaptation of that computer program provided: 

1) that such a new copy or adaptation is created as an essential step in the utilization of the com- 
puter program in conjunction with a machine and that it is used in no other manner, or 

2) that such new copy or adaptation is for archival purpnses only and that all archival copies are 
destroyed in the event that continued pxissession of the computer program should cease to be 
rightful. 

Any exact copies prepared in accordance with the provisions of this section may be leased, sold, 
or otherwise transferred, along with the copy from which such copies were prepared, only as part 
of the lease, sale, or other transfer of all rights in the program. Adaptations so prepared may be 
transferred only with the authorization of the copyright owner." 

United States Code title 17, §117 
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Editorial Notes 

COMPUTIST on Disk 

I've received a number of letters suggest- 
ing I work out a way to put the issues on disk. 
This issue is a (over) 1 Mbyte formatted Page- 
Maker file on a MAC. About 1/3 (I think) of 
that is actual text, the rest is graphics or 
formatting commands. So we're looking at 
over 300Kbytes of text and this is our smallest 
format, only 24 pages. We would have to use 
two 5 .25 " disks or one 3 .5 " disk. I estimate the 
cost would be about the same as the cost of a 
combination subscription {$ 1 00/yr/l 2 issues). 
I would like to know how many readers are 
really willing to pay the extra cost to get their 
issues on disk. Write to me if you are inter- 
ested. Let me know what equipment you are 
using. If enough people are interested we'll 
see if we can find someone to do it. If someone 
is interested in working out a good disk for- 
mat, you should also write and let me know. 
Submission Notes 

As of this issue I'm current on submis- 
sions up to (and including some of) March. If 
you sent something before March and you 
haven't seen it published, then you should 
check with me at your earliest convenience. 
Some letters require alotof editing andloften 
bump them when I don't have enough time (a 
chronic condition around here). But I usually 
get to them by the next issue or so. 
Change In Most Wanted 

I've made a change in the MOST 
WANTED list. To the left of each title is the 
issue number when that title was added. You 
can use that number to tell how long a title has 
been on the list. I thought it might help if you 
knew which ones to concentrate on. 
Library Disk Notes 
; There wasn'i^a lot in tlys issu?. ia.the W-ay ; 
•«f tyipe-ab je pf;ogi:aii)s that cQuld be putjon .the ; 
library disk so I copied the Eamon Master' 
disk onto the front and put Eamon Adventure 
# 194. atteCfc of tft< *Wtdtt* on the back. 



Raster Blaster 10 

Rearguard ;; ID 

|;Repton .„-.,..,.>i«.^.v..- 10 

»Ribbit .........;...i...;i.:.....;...V: ...8.10 

;Robotro*2fi»4-!!.>..ni.:..«.ii.»..t^.«.-; ift 

Sammy Lightfoot 8 

Sea Dragon 10 

Sea Fox 8,10 

Serpentine 8, 10 

Situation Critical: 19 

Snack Attack 8, 10 

Snake Byte 8, 10 

Snapper 8, 10 

Sneakers ,. ..10 

Snoogle „:;.;......;........ :....;......... ;.:.....;...::.;!§ 

Space Cadets ......:..;.„............. ........:...... 10 

Space Quarks , ...8, 10 

Spy's Demise 8, 10 

Star Maze 10 

Star Thief 8, 10 

Star Trek 10 

Succesion 10 

Super Puckman 10 

Swashbuckler 8, 10 

Syzygy 10 

Taxman 10 

Teleport 8, 10 

Thief 10 

Threshold , 10 

Thunderbombs 8, 10 

Tubeway 10 

Tubeway n 8 

Viper 10 

Wargle ,..,,.... ,., 8.10 

Warlock GS ,...., ........9 

Zany Golf GS .9 

Playing Tips: 

Bard's Tale I 8 

Dungeon Master 6, 8 

Neuromancer 8 

Ultima ni 10 

Ultima V 9. 18 

Where in the World is Carmen SanDiego 5 

Wizardry (Proving Grounds 

of the Mad Overlord) 8 

Wizardry..... 10 

Zork Zero 16 

IBM Playing Tips: 

Mean Streets 20 

Mech Warrior 20 

Pool of Radiance 20 



COMPUTIST #73 



Readers Data Exchange 



Jeff Hurlburt 



TX 



'LTIh® 
FIE(D)PIU(C"ir 





RATINGS 


i^iri^iz^ 


SUPERB 


it^^i^ 


EXCELLENT 


i^^i^ 


VERY GOOD 


^^ 


GOOD 


^ 


FAIR 


© 


POOR 


©o 


BAD 


# 


DEFECTIVE 



The tricky part about taking on the review of 
any large-scale adventure is that it's all too easy 
to get wrapped up in the game. When you tackle 
three good ones — hke "Champions of Kryim", 
"Windwalker", and "Dragon Wars" — one after 
the other... More games next time; but, for sure, 
some serious applications stuff too. 

Dragon Wars 
$49.95 Interplay 

Requirements: 

128K Apple n series 
one 5.25 or 3.5" drive 
Ilgs recommended 

In this long-play adventure from the "'Bard's 
Tale" people, your party is among a group of 
pilgrims newly arrived in Purgatory, Oceana's 
premier city, bicredibly, not only is the place a 
wreck, but you are set upon by thugs in guard 
uniforms, stripped of possessions, and left to 
fend for yourself in the world's largest prison 
camp. 

The problem, it turns out, is that a man-demon 
conqueror calling himself "Namtar the Magnifi- 
cent" has found a way to control the dragons 
upon which the great cities depend for defense. 
After such 'demonstrations' as Purgatory, most 
have surrendered, but not all. You, of course, are 
more determined than ever to "see the wonders of 
Oceana". Your vacation is spoiled and Namtar is 
going to pay the bill! 

Given the popularity of Interplay's '"Bard's 
Tale" series, it will come as no surprise that 
"Dragon Wars" adopts essentially the same for- 
mat. To the left you get the expected 3-D perspec- 
tive forward view showing trees, pools, bridges, 
walls, etc.. To the right, bar graphs reflect current 
hit point/ magic power status of party members; 
and a small area at the bottom is reserved for 
message displays. As in '"Bard's Tale" and 
"Wizardry V", combat is whatl've called "semi- 
tactical". That is, a picture of an opponent ap- 
pears; and you trade blows, cast spells, advance, 
flee (use artifacts, reload, change weapons, etc.) 
via choices presented in a combat window, which 
also reports results for each round. Distance is a 
factor for both weapons and magic as well as 
starting location(s) of the one or more enemy 
groups you face. Opponents run the gamut from 
easy drunks, dogs, and thieves, through giant 
spiders, pikemen, murk trees, goblins, wizards, 
demons and dragons. Over sixty types help guar- 
antee a variety of entertaining combat situations. 

Marked similarities notwithstanding, it is 
hardly obvious that "Dragon Wars" has a famous 
pedigree. Aside from a more Conanesque feel 
and richer, puzzle-packed scenario, the new re- 
lease also embraces a bigger, more varied land- 
scape including cities, ruins, mines, and forests 
spread across several islands. A sprawling (32 x 
32 grid) Underworld provides several conven- 
ient back doors to widely separated topside areas, 
and, along with teleports and ships , helps a player 
who's learned the ropes avoid time-consuming 
journeys. 

Especially welcome is a new self-mapping 
feature — just press "?" for a 9 x 8 'Ultima map' 
view showing your party and adjacent explored 
squares. A saved game 'remembers' this infor- 
mation; so there is little need for anything beyond 
rough pencil-and-paper sketches. Good note- 
taking, however, is fairly critical if you hope to 
avoid such errors as walking into a fatal trap after 
being told that"A deadly snare awaits the unwary 
in Freeport" (sigh). Taverns supply numerous 
valuable "rumors" and often you will be referred 
to one of the manual's 147 clue-packed "para- 
graphs". 

Unlike mostmajor adventures, "Dragon Wars" 
actually builds in few 'must do' activities. Basi- 
cally, your mission is to zap Namtar and dump his 
bod into The Abyss. How you pull this off is, 
largely, an open-ended proposition, since neither 
finding Namtar's stronghold nor getting in is 
especially difficult. The catch, as may be antici- 
pated in a realistic scenario, is that weak, poorly 
armed characters lacking powerful spells and 
artifacts will simply be blown away in the first 
encounter with Namtar's guards. Much of the 
game amounts to a quest for better weapons and 
armor, juicier spell scrolls, and high-power arti- 
facts (e.g. the Dragon Horn and Freedom Sword, 
each of which can be "charged" for up to 49 



castings of SERIOUS DAMAGE-class spells). 
The farther (higher, deeper) you range the better 
the chances of 'quality' opposition and the more 
truly proficient you become in the use of your 
Druid, Sun, High, and Low Magic spells (65 in 
all), special "Abilities" (e.g. tracking, climbing, 
etc.), and arms. 

The Ilgs recommendation, of course, reflects 
the no-swap, no-flip convenience of 3.5" media; 
but only partly. In "Dragon Wars" all newly 
created characters begin with identical, low 
numbers for Strength, Dexterity, Magic Power, 
etc.. You assign a name and gender, and then 
tailor the character by spending 50 "Bonus Points" 
to raise attributes and/or enable weapons, magic, 
and other skills. You can create or transfer-in 
(from He versions of '"Bard's Tale" I-III) up to 
four characters. The other three slots are filled by 
recruits found in camps and taverns or by tempo- 
rary creatures you summon. Unfortunately, while 
your heroes can survive, at just two new Bonus 
Points per Level of advancement, character 
growth slows to a crawl. Due chiefly to very 
limited Magic Power, progress is bound to bog 
down in major league monster areas as you must 
repeatedly break off promising explorations to 
seek a power recharge for your spell casters. 

Putting the above in persjjective: when, after 
several days of enjoyable play, I finally achieved 
victory, my characters had reached only Level 20 
or so — this after mapping virtually every square 
of the game and slaughtering veritable armies. 
Well, Level 20 corresponds to a mere 20 addi- 
tional Magic Power. Without the benefit of sig- 
nificant 'external boosts' (i.e. I pumped-in some- 
thing like 400 additional Bonus Points per char- 
acter), playing time could easily have tripled — 
most of it spent in boring, drawn-out hacking 
matches. (Naturally, NOW, I could win with a 
much weaker party; so, no doubt, could/did? a 
beta tester working with a full set of annotated 
maps.) The game's rating assumes play on a Ilgs 
where, when a user just can't stand another five- 
minute sword fight with pissants, he or she can 
enter the monitor and soup-up magic user power 
(at S403B, S423B, ... S4C3B). A better approach 
is to start off new characters with 127 Bonus 
Points (enter S7F); and restrict later additions to 
15-20 points upon each level increase. 

Note: It may be that He users can make the 
Bonus Point additions to diskette character files 
(byte $3B in each). I did not try it because on-disk 
data is notorious for being booby trapped (e.g. via 
checksums); and there is no easy way to tell how 
far into the game a trap will 'kick in'. To the 
credit of DW's designers and Interplay, the disk- 
ettes are not protected, in-memory character info 
is not hidden, and the standard Ilgs interrupts are 
not switched off. 

Though sound is just a notch above silence — 
after a musical intro about all you will hear is 
your footsteps — "Dragon Wars" boasts, in all 
probability, the very best double-hires displays 
of any adventure. Baywoof (the ex-IIgs user) 
happened to walk in during one gaming session 
and, after taking a hard look at the beautifully 
done artwork and animation of a monster pic, he 
actually asked if the game was done in super -res! 
Add smooth point-and-click mouse operation 
and you have a very attractive adventuring pack- 
age: easy to 'get into', absorbing, and definitely 
'different'. 

Fast Frames, Updates, etc. 

2088: Bargain Thrills 

From Vinay Pai at Victory Software re. "2088: 
The Cryllan Mission": 

"Although the list price is $69.95, Roger 
Coats and Program Plus are offering it for nearly 
50% off list price. Additionally, any Egghead 
Discount Software store can specially order our 
product (SKU 585-844)." 

Dragon Wars Tavern Tales 

"... still packs the Sheer he found in the 
Underworld and Rubywand favors her Dragon 
Sword. Still when y ' want a good solid hit and a 
few extra yards o' reach, it's tough to beat this 
here Dragon Tooth." 

"My archer wasn't worth spit 'til we found 
that cache of Grey Arrows in the guard house 
near the bridge. 'Course, the guards made a 
terr'ble fiiss; but now we can jus' walze in there 
any old time, spring the lock, and... some other 
nice stuff in the same chest... " 

"... to use the Spectacles again and scarf up on 
more goodies? Right? But it didn't work. You get 
to the last room and the door is missing! Then 
Rubywand says, 'Look, we've sprung Zaton; so, 
let's ditch the Bowl and give it another try.'..." 

"... been sinking for years. Well, Doc Gor- 
bash takes one look and says: 'Hydraulics, Gen- 
tlemen, is hydraulics. There has to be a mud leak 
somewhere. ...'" 

"... we're about to say adios to the Under- 
world and try out Lansk hospitality, when Moth- 
nose spots this weird pool just a stone's throw to 
the west... " 

"... claims they tinkered up a mean little 
beauty called the Dragon Horn; and it's still 
down there. Trouble is, no one knows what 
happened to the dwarfs." 

"So this mean mud sucker is sittin' there 
waitin' to be fed and I'm startin' to think maybe 
we're on the menu. Then ol' Batfoot here blurts 
out: 'The Mystic Woods! I've still got those... " 

Too Easy? 

Supposed you're updating some favorite 
application diskette to GSOS 5.0 and discover 
that all your neat stuff won't quite fit. (Gasp! Oh 
No!) Not to fret; if one of the programs loads a 
non-packed startup picture (e.g. a $C1 file) and 



losing it causes no great concern, you can, more 
likely than not, safely shrink it and obtain an extra 
30K+. For example: entering BSAVE 
SPLASH,T$C1,A$0000,L$1 will replace a 32K 
picture named "Splash" with a version using less 
than 1 K. The program still has a "picture" to load 
(rather quickly, I might add); and you have an 
extra chunk of diskette space. 

No Clue In the Pool 

Responding to various rumors, SSI's Linda 
Blanchard notes that there is currently no plan to 
supply free Clue Books with any of the TSR 
D&D adventures. 

Regarding David Stewart's observation that 
"Pool of Radiance" left him wandering and vic- 
toryless: Yes, due largely to the piecemeal nature 
of die quest (i.e. you are supposed to clear the city 
of Evil), the game is known for its unspectacular 
ending. Anyone who wipes out all opposition can 
safely declare Victory. Later SSI releases, nota- 
bly "Champions of Krynn", are much better 
about celebrating your success. As to being able 
to wander around after wiiming: this is an on- 
purpxjse feature of TSR adventures intended to 
permit characters on the verge of Level promo- 
tion to advance in preparation for the next adven- 
ture. 

Vendors 

Electronic Arts: 1820 Gateway Drive, San 
Mateo, CA 94404 atten: Lisa Higgins (415-571- 
7171) 

Interplay Productions: 1575 Corporate 
Drive, Costa Mesa, CA 92626 atten: Mkt. Direc- 
tor (714-545-9001; orders: 800-227-6900) 

Strategic Simulations Inc.: 1046 North 
Rengstorff Ave., Mountain View, CA 94043 
atten: Linda Blanchard (415-964-1353) 

Victory Software: P.O. Box 821381, Hous- 
ton, TX 77282-1381 atten: Vinay Pai (800-232- 
3828, in Texas call 713-493-3232) 
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The Big Durf 

Comments on Assembly Language 
Programming for Beginners 

A number of new subscrit)ers are not quite 
conversant with assembly language. Neither am 
I, really. I just dabble with the stuff, and barely 
know what most of the Opcodes mean, let alone 
how they work together in the more complex 
programs. I can just do simple stuff. 

What do you do when it comes time to learn 
assembly language programming? Here are the 
books and programs that I find to be very valu- 
able and worth their weight in silicon (ha, ha). 

First off, you need an assembler. I've listed 
these from best to worst, in my opinion: 

1) Meriin 8/16 or Meriin Pro 

2) S-C Macro Assembler 

3) Orca/M E-Z assembler 

4) Microsparc Assembler 

5) Apple'sDOS toolkit or ProDOS assembler 

6) LISA (Lazer systems) 

You can get the Microsparc Assembler (the 
one I have) from Microsparc Inc. This assembler 
is excellent, for my tastes, and will be adequate 
for almost all of your assembly needs, although 
it is nothing special. Apple still sells the DOS 
Toolkit assemblers and the ProDOS developers 
disk at outrageous prices. You can get Merlin 
from Silicon Express for $88.95, and it is a 
complete package, with four different operating 
systems supported (DOS 3.3, ProDOS 8 & 16, 
and GS/OS), disassembler, list debugger, and 
many utilities and source listings. Merlin is, of 
course, the best assembler you can get for the 
Apple line of computers. If you get it, you won't 
need anything else. 

If your assembler doesn't come with a disas- 
sembler, then you can get Munch-A-Bug from 
Rodger Wagner Publishing, Inc., and it will do 
everything you need, including mini-assembler. 

Now, what to do with the assemblers? Well, 
you get a some books and read and do everything 
they say. Here are some books, listed in no par- 
ticular order: 

1. Assembly Lines: The Book by Rodger 
Wagner. 

2. Apple Assembly Language Programming 
by Malcolm Whapshott. 

3. Assembly Language for Beginners by 
Leventhal. 

4. Apple Programmer's Handbook by Paul 
Irwin. 

5. Begiraier's Guide to Apple II Assembly 
Language by S. Scott Zimmerman. 

6. 6502 Subroutines by Leventhal (and 6502 
Assembly Language I'rogramming by same). 

7. Third Book of Apple Secrets by Nibble / 
Microsparc. 

8. Your Apple Games Gallary by Nibble / 
Microsparc. 

9. Nibble Express IX by Nibble / Microsparc. 

10. Beneath Apple DOS by Lechner /Worth. 

11. Beneath Apple ProEXDS by Lechner / 
Worth. 

The Apple Assembly Language Program- 
ming book comes with an assembler, apretty OK 
one but I {irefer the Microsparc Assembler or 
Merlin. You can get books 1,10 and 11 from 
Silicon Express pretty cheap. You can get books 
3 and 6 from A-2 Central. You can get books 
5,7,8, and 9 from Nibble / Microsparc Publica- 
tions. You can get books 2,4 and 5 from Howard 
W. Sams Co. All in all, the whole package will 
probably cost around $200, and the assembler 
from $50 (Microsparc Assembler) to $ 1 00 (Merlin 
8/16). So, assembly will cost as much as a com- 
plete Pascal or Cobol or "C" package, but is 
infinitely more rewarding to learn, and is the 



language of choice among all of the professional 
programmers in the world today. Besides, as- 
sembly is the language that the aforementioned 
high-level languages are written in. 

The books above will contain almost every- 
thing you need to Icnow, but not all. You can 
obtain a technical reference manual from Apple 
(or from Videx Techs, for Laser 128 owners) 
with $F800-$FFFF disassembly (commented 
upon, hopefiilly), and the Merlin comes with a 
disassembly (commented) of Applesoft. The 
Beneath Apple DOS book contains all you need 
to icnow about DOS locations, along with Com- 
putist #60. 

1 am not into assembly on the Ilgs, but if you 
insist upon it, then I would recommend that you 
acquire some of the following stuff on Ilgs as- 
sembly language. Idon'thave any of these lxx)ks, 
but I am sure that they are all excellent. You can 
get them all from A-2 Central. 

Ilgs Machine Language for Beginners by 
Wagner. 

Programming the Ilgs in Assembly Language 
by Lichty / Eyes. 

Programming the Ilgs in C and Asm. Lan- 
guage by Andrews. 

Programming the 65815 by Lichty / Eyes. 

Apple Ilgs Asm. Language Progranmiing by 
Scanlon. 

Programmer's Intro to the Ilgs by Apple. 

Apple Ugs Toolbox Reference, Vol. I by 
Apple. 

Apple Ilgs Toolbox Reference, Vol. II by 
Apple. 

A-2 Central also has several of Apple's tech- 
nical references for the Ilgs, as well as several 
other Ilgs books. I can only suggest the Merlin 8/ 
16 assembler, the S-C Macro Assembler version 
2.0 or later, or the ORCA/M GS version of the 
Orca/M assembler. The Merlin is, of course, the 
l)est as far as the overall package and ease of GS 
use goes, with complete GS stuff. 

Now that you have spent all of that money, I 
am going to ask you to spend a bit more. The 
following list of disks/programs Iconsider essen- 
tial when using Assembly language program- 
ming regularly. I have all of the tielow stuff 
hidden in comers of my room, and I use Copy 11+ 
and the Assembler most often, in conjunction 
with Apple works. Why a word processor? Easier 
to write a source file with, then save and assemble 
with your assembler. Face it, the assemblers have 
really crununy editors, and you need a word 
processor for them long jobs that take all night to 
typw in after 2 months of writing on paper. 

DOS 3.3 system master 

ProDOS 8 system master (or ProDOS 16 / 
GS/OS) 

Copy n+ or Locksmith bitcopying utilities 

Appleworks, Applewriter He or comparable 
word processor 

Here is my suggested Hardware (for lie if you 
don't already have it): 

2 Disk Drives 
Printer 

128K or more memory 
80 columns 

NMI card (Laser 128 owners can just press 
Ctrl reset M) 

Addresses 

Here's the list of address' for all of the com- 
panies mentioned above. They will all be happy 
to send you prices of any of their merchandise, 
and many have free catalogs. 

Silicon Express, Box 850, Patlaska, OH 
43062(1-800-999-6868) 

Howard W. Sams and Company, 4300 W. 
62nd Street, Indianapolis, IN 46268 (1-800-428- 
SAMS, FAX 1-317-298-5604) 

A-2 Central, P.O Box 1 1250, Overland Park. 
KS. 66207 

MicroSPARC Inc. and Nibble Publications. 
52 Domino Drive, Concord, MA. 01742-9906 
(Tech Support: 508-37 1 - 1 669, Modem Line: 508- 
369;8920) 

Apple Computer, 10260Bandley Drive, Cu- 
pertino, CA. 95014 (1-408-996-1010) 

Central Point Software, 9700 SW Capitol 
Highway,Portland, OR. 97219(1-503-244-5782) 

Computer Direct, 22292 N. Pepper Road, 
Barrington, 111. 60010 (1-800-BUY-WISE or 1- 
312-382-5058) 

Applied Engineering, P.O. Box 815828, 
Dallas, TX. 75381 (1-800-327-7234) 

Public Domain Exchange, 2074C Walsh, 
Ste. 850, Santa Clara, CA. 95050 (1-800-331- 
8125) 

Online Store, 3037 Golf Course Dr., Ven- 
tura, CA. 93003 (805-650-0188, FAX: 805-650- 
0195, Modem: 805-650-0193 - awesome Mo- 
dem prices & other stufO 

Roger Wagner Publishing, Inc., 10761 
Woodside Ave., Ste. E, Santee, Ca. 92701 

Using Copy II plus to make an APT 

Ah, yes, the elusive Advanced Player's Tech- 
nique. Well, there are a multitude of ways to 
make an AI'T, depending upon the type and 
complexity of the game you are playing. Since 
Ultima V has been so overkilled in Computist, I 
shaH now beat the dead horse, so to speak. 

This is not, however, an article about Ultima 
V. This is a brief demonstration by which I will 
enlighten you on a new way to make the APT 
process much faster. Most of the people reading 
this article haveCopy n+, v 8.?, and if you don't, 
then I would suggest that you spend $20.95 at 
Silicon Express to getyourself acopyof thebest 
Bitcopier around. Copy 11+ has an excellent 
Autocopy feamre. You just pre-set the parame- 
ters, and then the program does the hard work. 
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But, the Autocopy feature of Copy 11+ has one 
more endearing aspect. It does Sector Edits, too. 
Bob Igo's Editor Creator II showed me the light. 
Following is a step-by-step way to Use the Auto- 
copy feature of Copy 11+ to perform Ughtning- 
fast sector edits, anytime you want. 

Now, let us say you just got into a nasty fight 
with the guards at Blackthorn's place. You are 
almost dead, low on spells and reagents, and just 
about out of Skull Keys, oh, no! . Well, you save 
the game, and pull out your Computist Starter 
Kit. Twenty minutes later, you are done editing 
and you are playing again, with a fresh group. 
Well, here is how to eliminate the 20-minute 
span. 

1. Boot Copy n+. Chose 5.25" BITCOPY from 
the copy sub-menu. The computer boots 
BITCOPY.S YSTEM, and you chose slot 6 (or 
whatever). Now, go to the CREATE PARAM 
ENTRY option. 

2. Now, the screen is cleared, and you have a 
prompt at the NAME: line. Enter ULTIMA V 
APT (EQUIPMENT). 

3. Now, the prompt is at the BY: line. Just enter 
your name (heck, you did the typing, why 
not?). 

4. Now, the prompt is on the first line of the editor 
(inbetween the dotted lines). You can have the 
Autocopier print a message and have you press 
return before the Sector Editor starts. Just 
enter a quote ("), then type in the message (like 
below), then another quote, and press return. 

"INSERT YOUR BRITANNIA DISK" 
The computer automatically asks you to press 
return to go on. 

5. Now, enter the following: 

SECTOR EDIT, TRACK 3, SECTOR 1, 

DOS 3.3, 0F:99, 1B:99, 1D:99, 

23:99/99/99/99/99 /99/99/99/99/99/ 

99/99/99, 70: 99/99/99/99/99/99/99/ 

99/99/99/99/99/99/99/99/99 

, 90:FF/FF/FF/FF/FF/FF/FF/FF/99/ 

99/99/99/99/99/99/99 

SECTOR EDIT, TRACK 3, SECTOR 4, 

DOS 3.3, 80:99/99/99/99/99/99/99/ 

01, F0:FF/FF/FF/FF/FF/FF/FF/99/FF/ 

FF/FF/FF/FF 

And here is what it all means. Sector edit 
means just what it says, sector edit. Track and 
sector tell the computer in hex what track and 
sector to edit, and the DOS 3.3 message tells it 
that it is a 16-sector diskette. The numbers fol- 
lowing are all in hex, and they represent an 
address, followed by the bytes to insert starting at 
that address. Those are the actual bytes to write to 
the disk, not the bytes to change. The above Parm 
entry gives your guys a full complement of equip- 
ment and spell reagents, including mystical 
weapons and armor, and mucho carpets and keys. 

6. Press esc to edit the thing (I,J,K,M keys to 
move cursor), if you need to, and then press 
Ctrl Q to quit. Now, just choose the save Parm 
entry from the main menu and you are done. 

You can also enter similar edits for your char- 
acters, spells, and anything else you want. I have 
similar edits to all of my favorite games. 

Autocopy Farm to copy Ultima V: 

NAME: ULTIMA V 

BY: ORIGIN SYSTEMS, INC. 

T0-T2, SECTOR COPY 

T3-T22, 15=00, 16=00, 17=AA, 

18=1B, 

19=AB, 1A=00, 9F=01 

SECTOR EDIT, TRACK 1, SECTOR 4, 

DOS 3.3, 90:EA/EA 

Computist #61 has all of the sector edits for 
Ultima V and for Baid's Tale III, thus making it 
the most wanted issue around for fans of either of 
those games. Computist #62 has the edit needed 
to remove the necessity for the Bard's Tale in 
wheel, and Computist #63 has MOST of the 
necessary tips for the Ultima V game. 
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I am a long-time hacker and also an addict of 
fantasy-role playing games, the foremost of these 
obviously Lord British's Ultima. Although it's 
been a while since the debut of Ultima II, I feel 
that it is still a great game and that some of those 
owning the old version of Ultimall (as of c. 1983) 
could use some help either making duphcates of 
the jjrotected BOOT disk or editing their charac- 
ters. 

Softkey for... 

Ultima II (Original Version) 

9 

To copy Ultima 11, 1 recommend using Copy 
n Plus. I have not experimented with Locksmith 
or any other Manual Bit Copiers. Boot up Copy 
n, and BIT COPY the whole boot disk. 

Then go to the sector editor, and read track 3, 
sector OC. Change bytes $84-86 to EA EA EA. 
Write the sector. The other two disks can be 
copied with any copier, including COPY A, copy 
disk, and also Super Disk Copy. 

Character Editing 

I recommend you use any Copy II Plus for this 
although any sector editor can be used. Boot it up 
and take a look at track $04 sector $08 on the 
player disk. 

In bytes $04-$12 are your character's name, 
listed in ASCII text. Byte $14 contains sex, $CD 
for a male and $C6 for female. 

Byte $17 contains the era that you are in. $0 
represents Legends, $1 Pangea, $2 BC,$3 AD, 
and $4 Aftermath. 



By te 1 8 has no interest whatsoever but can be 
fun to play around with. Although you can only 
save your character in the wildemess, if you put 
any value other than SOO in this byte it will save 
you IN A TOWN. If you add this number you will 
start in a town - which will disappear when you 
leave. 

Bytes $19 through SIE are your abilities: 
strength, agility, stamina, charisma, wisdom, and 
intelligence. The values are from decimal 1 to 99. 
Beware of putting it to high - if you gain in these 
and exceed 99 you go to 1 . 

Bytes $1F and $20 are hit points, again in 
decimal form. For example if S1F=$50 & 
$20=S10, the H.P.Will be 5010. Bytes $21 to $23 
contain food. X.P. is in $24 & $25 and gold is in 
$26 and $27. 

The place your character is at is saved in 
Bytes $28 and $29, X and Y respectively. 

The weapon is stored in $2F, ranging from 
$01 dagger to $09 quicksword. Armor is byte 
$30. The ready spell is stored in byte $31. Bytes 
$32=torches, $33=keys, and $34=tools. 

The # of weapons carried are in $45 to $4D. 
Armour is contained in bytes $65 to $6A. And 
also spells in $85 to $8D. The items are saved in 
$A4 to $B3. You can experiment and find these 
out very easily. 

Good luck, and with these tips it should be 
very easy to complete Ultima II — the Revenge 
of ihe, Enchantress. 
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Ron Stankiewicz 

© I have acouple of questions I would like to 
address to those Alien Mind players. 

Like many of you, I would prefer to play with 
a backup copy of Alien Mind; however, not even 
Copy 11+ can copy it. Yet, I periodically see 
someone writing about editing copies of the 
game. How did you back it up? 

©In Computist #69, there was an APT to 
change the Saved Game Disk. I've searched the 
entire disk and can' t find where the data is stored. 
Further, if I make acopy of the Saved Game Disk, 
it is not useable for play. Why? How do I make a 
copy of the disk? 

® For those who have finished the game — 
how did you do it? Through working the game 
over and over, and the use of maps, I eventually 
wound up on the last level facing the Alien with 
over 4(X)0 energy points. I even set up my IBM 
clone next to my GS in order to create a word 
processing document of the entire script — every 
computer screen, every message, every pass- 
word — in the hopes of gleaning some hint from 
the collective text. Still, I can't maneuver aroimd 
the Alien and in a matter of seconds I find myself 
eliminated. 

I do have one complaint aimed at the folks of 
Computist: Don'tprintlistsof passwords in such 
conspicuous places. Yes, a few of them were 
extremely hard to determine. In fact, I was stuck 
on one for so long that I finally wrote to PBI for 
their "Hint Book." As Murphy's Law would 
have it, in the intervening time between mailing 
my letter to PBI and receiving the Hint Book, I 
determined what the password was. Anyway, it's 
a bit hard to read Computist with the lists right in 
front of you. Why not publish them in a comer 
somewhere, maybe even using a mirror image 
font. Or maybe the readers who want all or some 
of the passwords could write to the author of the 
list (remember to include a SASE). 

® One last question aimed at all the software 
authors who place all those cute little tricks, trap 
doors, and "Easter Eggs" in their programs: Why 
do you do something like that and not make 
public its existence? 
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Playing Tip for... 

Wliere in tiie World is 
Carmen SanDiego 

Broderbund 

Search Warrant Information 

Carmen SanDiego — Tetmis, Brown hair. Jew- 
elry, Convertible 

Dazzle Annie — Tennis, Blonde Hair, Tattoo, 
Limo 

Fast Eddie B. — Croquet, Black hair, Jewehy, 
Convertible 

Ihor Ihorovitch — Croquet, Blond Hair, Tattoo, 
Limo 

Katherine Drib — Mountain Climbing, Brown 
hair. Tattoo, Motorcycle 

Lady Agatha — Tennis, Red hair, Tattoo, Con- 
vertible 

Len Bulk — Mountain Climbing, Red Hair, 
Tattoo, Convertible 

Merey LaRoc — Mountain Climbing, Brown 
hair. Jewelry, Limo 

Nick Brunch — Mountain Climbing, Black hair. 
Ring, Motorcycle 

Scar Graynolt — Croquet, Red Hair, Ring, Limo 

Culture 



Aborigines 


Sydney 


Aztec 


Mexico City 


Bedouins 


Cairo 


British colonial rule 


Singapore 


Byzantine 


Istanbul 


Captain Cook 


Sidney 


Commodore Perry 


Tokyo 


Croatian 


Budapest 


Emperor 


Tokyo 


Etruscan 


Rome 


Extremely tall people 


KigaU 


Georgian 


Moscow 


Gypsies 


Budapest 



Harald the Fairhaired 


Oslo 


Hellenic (Republic) 


Athens 


Henry Hudson 


New York 


Hittite 


Istanbul 


King Mongkut 


Bangkok 


Magayar 


Budapest 


Malay 


Singapore 


Party chairman 


Peking 


Party secretary 


Budapest 


President 


Kigali, New York 


Prime minister 


London 


Regent 


San Marino 


Renaissance painting 


Rome 


Ruling council 


Baghdad 


Samurai warriors 


Tokyo 


Serendip 


Colombo 


Saxon 


London 


Shang Dynasty 


Peking 


Shiva 


New Delhi 


Spanish Colonialism 


Lima 


Spanish Conquistadors 


Lima 


Sparta 


Athens 


Thai 


Bangkok 


Tsarist 


Moscow 


Tutsi People 


Kigali 


Wuchang Uprising 


Peking 


Yuan Dynasty 


Peking 


Currency 


Bahts 


Bangkok 


Drachmas 


Athens 


Forints 


Budapest 


Francs 


Moroni, Paris 


Kina 


Port Moresby 


Lira 


Istanbul, Rome 


Pesos 


Mexico City 


Pounds 


Cairo, London 


Rubles 


Moscow 


Rupees 


New Delhi 


Yen 


Tokyo 


Yuans 


Peking 


Flags 


Blu/Whi 


Athens, San Marino 


Red 


Peking 


Red/Whi 


Singapore 


Red/Whi/Blk 


Baghdad 


Red/Whi/Blu 


Bangkok, London. 




New York, Paris 


Red/Whi/Gm 


New Delhi 


Yel/Red/Blk 


Port Moresby 


Red/Yel/Gm 


Kigali 


Landmarks 


Aegean Sea 


Athens 


Amazon (River) 


Rio 


Archipelago 


Tokyo 


Babylonia 


Baghdad 


Big Ben 


London 


Black Sea 


Istanbul 


Buddhist relics 




Comoro Islands 


Moroni 


Constantinople 


Istanbul 


Coral Sea 


Port Moresby 


Crete 


Athens 


Danube (River) 


Budapest 


Eiffel Tower 


Paris 


Forbidden City 


Peking 


Forum 


Rome 


Ganges (River) 


New Delhi 


Garpe Peninsula 




Gran Chaco Plain 


Buenos Aires 


Grant's Tomb 


New York 


Great Sandy Desert 


Sydney 


Great Wall 


Peking 


Imperial Palace 


Tokyo 


Iraq 


Baghdad 


Island continent 


Sydney 


Island of Corfu 


Athens 


Island nation 


Colombo 


Kimlim Mountains 


Peking 


Loch Ness 


London 


Louve 


Paris 


Malacca 


Singapore 


Mesopotamia 


Baghdad 


Mount Ararat 


Istanbul 


Mount Blanc 


Paris 


Mount Karthala 


Moroni 


Moimt Olympus 


Athens 


Mount Popocatepetl 


Mexico City 


Mount Solimana 


Lima 


Mount Titano 


San Marino 


Mozambique Channel 


Moroni 


Nanda Devi 


New Delhi 


Nile (River) 


Cairo 


Oil fields/wells 




Orkney Island 


London 


Parthenon 


Athens 


Peninsula SE Asia 


Singapore 


Petrochemical Plant 


Istanbul 


Pindus Mountains 


Athens 


Po (River) 


Rome 


Pyramids 


Cairo 


Raffles Hotel 


Singapore 


Rain forest 


Singapore 


Red Fort 


New Delhi 


Rhodes 


Athens 


Rwanda 


Kigali 


Sahara 


Cairo 


Shinto shrines 


Tokyo' 


Siam/Thailand 


Bangkok 


Sikh temples 


New Delhi 


Skyscrapers 


New York 


Sri Lanka 


Colombo 


Stanie of Liberty 


l^ew York 


Subways 


New York 


Sugarloaf Peak 


Rio 


Sumeria 


Baghdad 


Syrian Desert 


Baghdad 


Tierra del Fuego 


Buenos Aires 


Tigris (River) 


Baghdad 


Turkey 


Istanbul 


United Nations 


New York 


Volcanoes 


Moroni, Tokyo 


Yellow Sea 


Peking 



Products 


Alpacca 


Lima 


Anjovan Scops Owl 


Moroni 


Art 


Athens, Paris 


Automobile Buyer 


Tokyo 


Beef 


Buenos Aires 


Cattle 


Buenos Aires 


Cobra 


New Delhi 


Coconuts 


Colombo 


Coffee Buyer 


Mexico City 


Copperhead 




Copra 


New Delhi 


Croquet 


Budapest 


Designer jeans 


New York 


Diamonds 


Rio 


Drama 


Athens 


Fashion 


Paris 


Fig Buyer 


Istanbul 


Gas Buyer 


Baghdad 


Gazelle 




Gila monster 


Mexico City 


Gorilla 


KigaU 


Grain 


Buenos Aires 


Grape Buyer 


Budapest 


Headhunters 


Port Moresby 


Headhntr artifacts 


Port Moresby 


King Cobra 


New Delhi 


Limestone 


Cairo 


Malayan art 


Singapore 


Marble 


Rome 


Modem Art 


New York 


Moslem art 


Moroni 


Nubian artifacts 


Cairo 


Nut Buyer/nuts 


Istanbul 


Olives 


Athens 


Pepper 


Bangkok 


Perfume Buyer 


Paris 


Rain Forest 


Singapore 


Rice 


Colombo 


Ship Buyer 


Singapore 


Silver Buyer 




Stamp Buyer/collection 


San Marino 


Sugar 


Cairo 


Tea 


Colombo 


Textiles 


Paris 


Tobacco Buyer 


New Delhi 


Tweed 


London 


Wallabies 


Sydney 


Whiskey 


London 


Wild Yaks 


Bangkok 


Wine 


Paris 


Wool 


Sidney 


Yacatecan jewelry 


Mexico City 


Yak Skins 


New Delhi 



Bitkey for... 

Math Blaster Plus! v3.1 
Davidson & Associates 

Requirements: 

2 blank disks (or one "flippy" disk) 
Bit copy program (COPY 11+) 
Any fast copy, program that can ignore errors 
(Locksmith 6.0) . 

The softkey provided by Jack R. Nissel in 
COMPUTIST ISSUE 68 did not work for my 
version. On version 3.1, when copying with a 
"standard" copy program, errors will be encoun- 
tered on TRACK $22 of SIDE 1, as well as on 
TRACK $01 of SIDE 2, so mine must be a 
different version. During the short time I tried, I 
was not able to locate the correct sector edits, nor 
did the published sector edits work with Version 
3.1 (ProDOSSV 1.4, written in FORTH). Again, 
that is why it is also important to provide some of 
the preceding and trailing "context" bytes, in 
order that the vital information may be found, 
even though it is not in the same location (pro- 
gram version/revisionnumbers willhelp, as well). 

At any rate, the following information should 
allow you to make a usable backup disk (copy 
protection and all), so that one does not need to 
keep grinding the dirt into the original disk (the 
program performs a fair amount of disk access- 
ing during the course of using it). More work 
needs to be done (primarily SIDE 2, it seems) to 
make it into deprotected format. When using the 
bit-copied MATH BLASTER PLUS! 3.1, the 
opening selection menu screen (only) will look 
slightly unconventional shortly after SIDE 2 has 
been accessed, but the program will be com- 
pletely functional, especially to those who are 
fully familiar with its use. Subsequent graphic 
screens are nicely done, and all the fimctions I 
tested so far seem to work correctly. 

Additional pseudo anti -pirating measures by 
Davidson include using a PRINTER SETUP 
menu which requires consulting the user's man- 
ual. The screen will instract you to "See Appen- 
dix C of your manual for printer and interface 
categories." Printer/interface cjird selection is 
done by choosing a letter of the alphabet (A-U for 
painters, A-Y for interface cards), rather than 
having compatible printers/interface cards spelled 
out on the screen; trying to find the right printer/ 
interface combination without the manual may 
be quite a chore — just thought I'd mention it. 

More Notes: When peeking around on SIDE 
2 of the original disk, you'll notice that TRACK 
$01, which contains the T)ext file PICTUREO is 
located in the protected env ironment. When SIDE 
2 is copied with an error-ignoring copier, that 
PICTUREO file comes across to the unprotected 
envirotunent virtually empty, thus the unconven- 
tional ap)pearance of the opening screen when 
SIDE 2 is accessed by the program. BIT COPY- 
ING SIDE 2 also does not work, and produces a 
totally unusable SIDE 2. So, more work needs to 
be done, not only on bringing the PICTUREO file 
across unscathed, butalso being able to (re)format 
and re- write TRACK $01 on the copy disk with- 
out problems. So far, erasing and certifying only 
TRACK $01, and writing PICTUREO to it intact 



COMPUTIST #73 
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(first using a ProDOS utility to get PICTURED to 
the unprotected environment, then using COPY 
n+ 8 .3 to copy PICTUREO to SIDE 2 of the copy 
disk) caused COPY 11+ to 'crash' and lock up 
with a 'CO' error (I've not seen COPY 11+ crash 
in quite this manner before). I'm certain other 
crackers with more time and exjjerience will be 
able to send in softkeys with easier methods for 
circumventing this particular copy protection. 

1. WRITE-PROTECT YOUR ORIGINAL 
PROGRAM DISK!!! 

2. Using your favorite bit copier, copy SIDE 1 
with default bit copy parameters. 

3. Using a copy program that can ignore errors 
(DO NOT BIT COPY!), copy SIDE 2 onto 
another disk, or on to the flipsideof yournotched 
copy disk. Ignore error on TRACK $01 . 

Theresultant copy will workvery adequately. 
Use it with the satisfying knowledge that your 
original program disk is not being subjected to 
constant wear and tear, especially if the disk is 
being used extensively in an educational envi- 
ronment, where many students will handle the 

disk. 



lA 



Dan Cross 

® After having hours of fiin with Super.Patch 
for Appleworks I've got just one question: What 
is Slinky Ram? 



Kzin Warrior 



TX 



Run Paintworks Gold 
on GS/OS 5.0 

Search for C9 08 00 00 CE and change the S08 
to a $7F. PWG is looking for a contiguous block 
of memory within the first 5 12K of the machine. 
The patch allows it to find the memory block 
anywhere within your IIGS . Also, with the growth 
in size of the operating system, you will need 1 .5 
meg to run PWG under GS/OS 5.0. 

A note about Reading & Me 

I was totally convinced that the softkey in 
issue #67 for Reading & Me didn't work until I 
checked the write protect notch of the original 
disk. Sure enough, it was write protected. I write 
protected my backup copy and it worked fine. 
Thanks for the softkey. 

® In issue 68, several letters were printed by 
subscribers who are unhappy with the current 
tabloid stock p^wr. Most of the complaints 
centered aroimd the storage aspects and messi- 
ness of the tabloid. Has any thought been given to 
making the entire issue available on a 3.S disk- 
ette? It would certainly help with the storage 
concerns and users could organize the informa- 
tion in any way they see fit. 

©Has anyone tried to decig^^.|h§ f^e,for- 
.,m^, pfjlve, 4tic}pbe«s Talking ABCs' for die 
JIGS. I would like to create iny own pictures and 
sounds for each of the letters in the alphabet. This 
just might be harder than writing my own pro- 
gram from scratch. 

® I have an off the wall request for the hard- 
ware hackers. I would like to see a CP/M co- 
processor board that utilizes a Hitachi HD64 1 80? 
(the one that has a superset of the Z80 processor). 
I know CP/M is dead, but I still like it. 



Softkey for... 



Bifbble Ghost Ilgs 



Behind the scenes of a One Byte Patch 

When sorneone submits a one byte patch to 
RDEX, I always wonder how that person figured 
out the patch. I appreciate the patch being sub- 
mitted to RDEX, but it does not help me get any 
better at deprotecting software if I don't under- 
stand how or what a patch does. If you want to 
know what I did to patch Bubble Ghost (BG for 
now on) then read on, otherwise skip to the end 
of the article for the one byte patch. 

BG is not a copy protected program in the 
normal sense. It is easily copied using any disk 
copy pffogram. BG employs screen identification 
using a hard to read non-copyable brown piece of 
pqjer as it's copy protection scheme. When you 
want to play the game, finding the piece of paper 
with the screens on it is a real nuisance, especially 
in my rat's nest of a computer room. So, I set out 
to learn a little more about my GS and remove/ 
disable the protection method on BG. 

Booting up BG, I noticed that Ctrl openapple 
esc did not respond with the CDA menu, so I 
could not "Visit rrlonitor". I guess the author did 
not want prying eyes examining his code. I spent 
a couple of hours searching through the disk with 
a sector editor trying to find out where the desk 
manager interrupt (El/ 00A8) was being dis- 
abled, so I could re-enable it and go "Visit 
monitor". I was upsuccessful in my search, but 
while scanning the disk I came across the string 
"What level is thi^?". I thought I was really onto 
something now, because there must be a refer- 
ence to that string somewhere. Disassembling 
the code on the (Ksk near the reference to the 
string proved fruitless. Then I remembered that 
BG is a ProDOS 16 file and that usually means 
relocatable file segments. The relocatable seg- 
ments are stored on the disk in such a way that the 
absolute address references are not resolved until 
the program is loaded into memory. 

Idon'thave the ProDOS 16 or GS/OS manual 
(yet), but scaiming through some old Call 
A.P.P.L.E.s (10/88 in particular), I found aseries 
of articles by Mike Westerfield (APW, Byte- 
works guy) on segmentation. I don't understand 



all the details of relocatable segments, but I did 
determine that there are five segments to the main 
BG file (Bubble.SYS16). The five segments to 
BG are main, globals, arrays, Ghost, and Dial. 
From another issue of Call A.P.P.L.E. (12/88), I 
determined that BG was written with APW C. 

I did one thing that helped tremendously 
while I was scanning the program on disk, I 
copied the main file (Bubble.SYS 16) to a freshly 
formatted disk. This caused the ProDOS block 
allocation to occur in a contiguous fashion. On 
the master BG disk, the blocks of the Bubble 
.SYS 16 file are scattered around haphazardly to 
whatever free blocks were available when the 
master BG disk was originally created. Also, 
copying the file to a fresh diskette gets all the 
operating system files out of the way, so I could 
concentrate on the program itself. 

S ince I still couldn ' t visit the monitor once the 
program started running, I decided to place a 
bomb at the start of the program. I made a copy 
of my original disk and changed the first byte of 
the main segment, after the Object Module For- 
mat (OMF) header (relocation info) to a 65816 
break (SOO) instruction. That is a sector edit to 
Block SCB, byte S3C, from $80 to $00. 

Booting a bomb version of BG, dropped the 
pirogram into the monitor after loading. Using 
"Memory Peeker"CDA, I determined where the 
memory manager had loaded BG in memory. I 
noticed that launching BG from finder caused 
BG to be spread across niunerous memory banks. 
However, if I dropped into BASIC and entered 
the trusted old "PR#5" to boot the disk, BG 
would load neatly into memory bank 1 . 

Searching for "What level is this" using the 
monitor proved harder than I anticipated. After 
setting my memoiy bank to 1 using the "1/" 
command, I tried using the search ("P") com- 
mand in the form VWhat* V800.COOOP', but the 
string would not be found. By trial and error, I 
discovered a command that produced the desired 
result '\57 68 61 74\<1/800.1/C000P'. I think 
that the command *\"What'Vl/800.1/COOOP' 
should have worked, but it didn't. Could some- 
one tell me why it wouldn't work? The search 
command located the string at location 01/7FC6. 
Next, I wanted to find references to that string, so 
I searched for 'NC6 7F\<1/800.1/C000P", re- 
membering that the low order byte precedes the 
high order byte for addresses. The pattem was 
found at01/BlA8.Frommy previous workusing 
the "Memory Peeker" CDA, I noticed that this 
code was near the beginning of the Dial segment, 
which started at location 01/B177. Disassem- 
bling the code showed the following: 
F4CB7F PEA $7FCB Push memoiy address 

of "What level" string 
F404C6 PEA $C604 Push Quickdraw tool call 

forDrawCStrJng 
22 00 00 E1 JSL $E10000Call the dispatcher 

One note about disassembling code using the 
monitor that I didn't know befoi-e is that the state 
of the m,x, and e flags of the processor status 
register of the 65816 effect the way in wWch the 
code is disassembled. If the m,x, and e flags are 
set to 1 , then when the "L" command is executed, 
the monitor disassembles the code in 6502 emu- 
lation mode and if the m,x, and e flags are set to 
0, the monitor disassembles code in the native 
65816 mode. The m flag sets a 8 or 16 bit 
accumulator, the x flag sets 8 or 16 bit index 
registers, and the e flag sets emulation or native 
mode. It might not seem like much to the experi- 
enced programmers, but it was an important 
discovery for me, 

BG gives you. two chances to identify the 
level on the screen correctly or else the program 
hangs. I disassembled more code in the same 
routine until I came across a RTL instruction. I 
found an infinite loop near the end of the routine 
as shown in the following code fragment: 
B188:E6EE INC $EE Number of tries to identify 

level 
B18A:A5EE LDA $EE Fetch number of tries 
B1 8C:C9 03 00 CMP #0003 Compare against 

maximum possible value 
B18F:DO03 BNE $B194 not last chance yet 
B191:82FF01 BRL $B393 Jump to the infinite loop 
B194: 

...More code here... 
B386:A5F2 LDA $F2 



B388C5 FF CMP $FF 



B38A:D0O4 
B38C:8007 



BNE $B390 
BRA $B395 



B38E:8003 BRA $B393 

B390:82F5FD BRL $B188 

B393:80FE BRA $B393 

B395:A8 TAY 



Load level number 

entered 

Compare to locations 

$FF&$00 

Wrong answer this time 

Right answer, continue 

with game 

Unreferenced instmction, 

C compiler? 

Loop back to top, try 

again 

INFINITE LOOP, 

INFINITE LOOP 

Right answer program 
continues on 

So my goal was now obvious, avoid jumping 
to the infinite loop. I decided to patch the instruc- 
tion (BNE) at $B38 A to jump to location $B395 
instead of $B390. Even when the incorrect level 
number is entered, the program jumps past the 
infinite loop. 

The BNE (Branch if Not Equal) instruction 
that I patched is a relative instruction. The execu- 
tion of the BNE will always causes a jump, if not 
equal, to be the same number of instructions 
away from the BNE, no matter where the pro- 
gram is loaded into memory. Since the area of the 
patch was not relying on any absolute memory 
locations, such as the address of the "What level 
is this" string, finding the pattem on the disk was 
easy using the Scan function of Copy n+. 



The 1 byte patch 

To sum it up, make a copy of BG with any disk 
copy program, edit block $1A9, byte 50 and 
change it from a $04 to a $09. When prompted to 
identify "What level is this?", just enter whatever 
number you like and the BG will continue on as 
if you answered the question correctly. If the 
above location is not a $04, search for SEX) 04 80 
07 80 03 and change the $04 to a $09. 

I hope this detailed explanation helps some- 
one out there as much as it helped me. Write to 
RDEX if you want to see more of this kind of 
article or would rather just see the one byte patch 
and be done with it. 



Wayne Hildebrand 
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Advanced Playing Technique for... 
Dragon Wars 

Interplay 

Each character uses 2 sectors of disk space 
and is written backwards. I used Copy 11+ to 
make these edits. Search your disk (side A,always 
use a backup) for the name of your characters. 
The names appear at the end of a sector. When a 
character is found back up 1 sector to start these 
edits. For example one character was found on 
track OF, sector 02 so start editing on track OF, 
sector 01. 



Bvtes 

00-01 

02-03 

04-05 

06-07 

08-09 

OA-OB 

OC-OD 

OE-OF 

10-11 

12 

13 

14 

15 

16 

17 

18 

19 

lA 

IB 

IC 

ID 

IE 

IF 

20 

21 

22 

23 

24 

25 

26 

27 

28 

29 

2A 

2B 

2C 

2D 

2E-35 

36-3D 

3E 

3F40 

41^2 

4346 

47-4A 

50-DF 

EO-FF 



Track OF, sector 01 

valueAttributeoritem 
any Dexterity 

Intelligence 

Spirit 

Health Left 

Max Health Available 

Stun Left 
" Max Stun Available 

Power Left. 

Max Power Available 

Arcane Lore 

Cave Lore 

Forest Lore 

Mountain Lore 

Town Lore 

Bandage 

Climb 

Fistfighting 

Hiding 

Lockpick 
" Pickpocket 

Swim 

Tracker 

Bureaucracy 

Druid Magic 

High Magic 
" Low Magic 

Merchant 

Sim Magic 

Axes 

Rails 

Maces 

Swords 

Two-Handers 

Bows 

Crossbows 

Throw Weapons 

Points used to increase skills 

Gives all spells 



FF 

?? 

?? 
any 
any 
any 



00=OK, 01=Dead, 02=Chained 
? 

Level 

Experience Points 
Gold 
? 

Armor, Weapons ,Items 



Track OF, sector 00 

(X)-C1 ?? Armor,Weapons,Items 
FO-FD Character Name 

FE-FF any Strength 

©Help! InMight&MagicII, after you defeat 
Sheltem and his Elemental Guards, and give the 
password (WAFE), you get a message from 
Sheltem in the form of a cryptogram. Does any- 
one know the CODE? Please write in the answer 
so others can use it if need be. Thanks for a great 
magazine. 



Sidewinder 
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Bitkey for... 

Gradebusters 123 v3.35 
Disco Tech 

Requirements: 

Copy n Plus v8.4 

The following bitkey should allow most 
owners of Gradebusters 123 to make backup 
copies of their program disk. The requirements 
are only that you must have your copy of Grade- 
busters 123 and COPY II +. 

On 5.25" bit copy menu you will see that one 
of your choices in Copy 11+ is CREATE NEW 
PARM ENTRY. This is the first thing that we 
will do. Choose this option and enter the follow- 
ing parm exactly. 

NAME: GRADEBUSTERS 123 

BY: DISCO TECH 

T0-T22 

SECTOR EDIT, TRACK 0, SECTOR OA, 

DOS 3.3, 1A:EA/EA/EA/EA, 2A:18/EA, 

40:18/EA, AO:EA/EA, 39:01, 75:EA/ 

EA, 79:EA/EA, 7E:EA/EA, 82:EA/EA, 

8E:B9/50/03/EA/EA 

SECTOR EDIT, TRACK 0, SECTOR OB, 

DOS 3.3, 50:D5/AA/96/AA/AA/AE/AF/ 

AB/AA/AA/AF/AB/AB/AE/AA/AA/AE/AE/ 

BB/AB/AE/AE/EB/AF/AB/AF/AB/AE/AE/ 



EE/AF/AA/BF/BA/EE/AE/BE/BE/BA/AA/ 
AA/AF/FB/DE/AA 

Now some notes on this bitkey. The version 
of Gradebusters that I was working on was 3.35. 
The version of Copy 11+ that I own is 8.4. 1 would 
dare to assume that this bitkey will work on most 
of the Gradebusters programs out there because 
it is very apparent that much time was spent in 
development of this copy protection scheme. At 
this time I only have a bitkey to offer because my 
time is limited as to how much work I can do on 
a softkey for this disk. I can say however that the 
copy that this bitkey will produce is very close to 
softkey because the copy may be copied by using 
only Copy 11+ and selecting the sector copy 
portion of the 5.25" bit copy routines. Two things 
however that you must know if you intend to 
copy the copy this way. First, the original disk 
has it's sectors arranged on a track in such a way 
as to speed the boot/loading process. If you 
choose to copy sectors only you will loose the 
extra speed that this arrangement provides. Sec- 
ond, you will have to set copy parm number 65 to 
00. This tells Copy 11+ to ignore data field check- 
sum errors. So as you can see, there isn't a whole 
lot of protection left. 

The original disk is protected by altering the 
data field checksums and by verifying that a 
certain string of bytes that are hard to copy exists 
on track 1 and track 23 (yes 23). My bit key tells 
the program to check track 1 twice instead of 
checking track 1 and 23. Tlie information that it 
is looking for (D5-AA-96-AA, etc.) I am hiding 
in track 0, sector B. Track 0, sector A and sector 
B are loaded into memory locations $200-S3FF 
respectively. This is done after boot (track 0, 
sector 0) loads track 0, sectors 1 thru 9 into 
memory locations $B600 thru $BFFF. This is a 
image of DOS 3.3 RWTS routines. The workings 
of the RWTS routines are very similar to DOS 3 .3 
except for the changes already mentioned and the 
altering of the read/write translate tables to make 
the data on the disk apipear coded. 

As I mentioned earlier I have hid the informa- 
tion that the protection looks for on track 1 and 23 
inside track 0, sector B. When the boot finishes 
loading the RWTS routines, it loads in sectors A 
and B into S200-S3FF. Our changes to sector A 
causes the program to check track 1 but actually 
read the wanted information out of $350 into the 
buffer at $800. It then checks to see if the data in 
$8(X) is good and then proceeds with loading. The 
program passes thru this routine twice, once at 
the start of bootup, and again just before the 
program starts to run. It also checks every time 
the program asks you to turn the disk over. The 
protection is the same on both sides of the disk 
except that track 0, sector B has information that 
tells the program which side of the disk it is on. 
I hope that this information helps some pro- 
gramers out there with this well done protection 
scheme. Looking at track 1 on your original disk 
with the nibble editor of Copy n+ will prove 
interesting to some. The siibroutineat$200(tfa{ac 
0, sector A) will stow you tow the extra zieros of 
auto sync bytes can be used to get data off of a 
disk without reading in 32 msec, loops. 



George Blgelow 
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Playing Tip for... 

Dungeon Master 

Faster Than Light 

This is a great Apple Ilgs game with digitized 
sound and pretty good animated graphics. For 
once a game has soimd that is part of the game, in 
Dungeon Master the soimds that monsters make 
can save your life at times! It is a huge game, 
compirising 14 levels, and mapping is essential. 
Be sure to save often, and I suggest having an 
extra disk to save the party on at the end of a level 
just in case you need to start the next level again. 

Here are some general suggestions, then I will 
proceed with a few hints for each level (I wish I 
had these while I was playing the game!). 

I suggest that you put in the firont two of the 
strongest heros you can find (load carrying ca- 
pacity is also impwrtant, you will find that they 
eventually have so much armor that there is little 
load capabihty left). Then find a good Ninja that 
you will use with projectile weapons, and a 
Wizard that will cast offensive sp>ells (and heal 
when necessary). Your rear characters will not 
get hit very often, so you do not need to load them 
down with the heavier armor. 

You will find wands and staffs in the dim- 
geon, be aware that these have only so many uses 
of their higher order spells, so be sparing of your 
fireballs or healings or whatever. 

By using a disk search utility you can find the 
character levels (clear up to Arch Master) and a 
list of all weapons, armor, food, and items used in 
the game. (Search for NEOPHYTE or SWORD). 
I found the levels at block $159 and the list 
starting at block $554. 

Level 1 - If a character dies bring his bones to 
the Altar of Rebirth to bring him back to life. 
There are others further down. 

Level 2 - You can fill a waterskin or empty 
tottle from a Lion Fountain. You will find keys 
throughout the dungeon, but look carefully be- 
cause some of them blend too well with the floor. 

Level 3 - There are four gates to be opened 
with gold keys, you are to find all four in the 
rooms. I never did figure out the place marked 
"cast your influence, cast your might" but you 
can win the game without it. In the Matrix, start 
in the second corridor to the right, then zigzag 
forward and to the left until you reach an alcove 
with a button. The button op)ens a door in an 
alcove to your rear. Good luck on the rest of the 
rooms! 
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Level 4 - This level is a long twisty corridor 
that you must work your way through. You will 
encounter poisonous worms here, and now is a 
good time to learn how to use doors to help you 
fight a monster. Attack and back up until you are 
just the other side of a door. When the monster 
moves into the doorway press the door button to 
close the door. The door will try to close on them 
and actually help you to kill them! You will find 
the Teowand here, it has a Calm spell that will 
cause a monster to stop attacking and move 
away. 

Level 5 - You will find a room with four 
puzzle rooms off it. In the force field room a 
wrong move will return you to the entrance of the 
room. If you move into the entrance (surrounded 
on three sides by fields) and turn right, these 
moves will take you to the store rooms - Forward, 
Right, Left, Back, Forward, Right You are on 
your own on the other rooms! 

Level 6 - Another long corridor, but with a 
piazle to solve before you can enter it. You need 
a mirror, coin, bow (you get it back) and blue gem 
to open the door. In the room at the end of the 
corridor to the right, throw something across the 
pit, then step aside before it lands. You get the 
Vorpal Blade on this level, the only weapon I 
could find that would hit non-material beings. At 
"Test Your Strength" a character that is strong 
enough (and one of mine that was 68 was not 
strong enough) can throw an item hard enough to 
get past the field. This opens a door farther down 
the corridor and you get into a room with a 
Mithral Aketon (chest armor), two slayers (ar- 
rows), and a drumstick. 

Level 7 - You get nowhere on this level until 
you get the other two Ra keys, which you will 
find on levels 9 and 12. Once you do get in, (and 
you can only get in once you have nearly com- 
pleted levell2)youmay find Stone Golems, very 
strong, use the door trick if you can. There are 
four doors opened with a turquoise key, but you 
will have only one. Here are the contents of these 
rooms so you will have some choice in the matter. 
Listed in the order that you first come across 
them: 

First door - Gem of Ages, lUumulet, Sceptre 
of Light (can heal or light) 

Second door - Dragon Spit (weapon). Boots 
of Sj)eed 

Third door - Crown of Nerra, magical box 

Fourth door - Flame Bain (shirt). Bolt Blade 

You get the winged key here in the long 
corridor on the opposite side of the maze from the 
entrance. There is a button on the left wall that 
opens a door back where you started in the 
corridor. 

Level 8 - Use the Vorpal Blade or "weaken 
ncm-material beings" spell on phantoms. The 
skeleton key fits in the skull on the wall, this 
opens a door to a stairway that goes all the way 
ji405vnito le,vel 14— but tjje only way to get into 
this stairway at any level is from that level with 
another skeletonkey. This stairway is very handy 
since you must come back up with the Ra keys, 
and I have not found any other way to come back 
up firom level 11. 

Level 9 - Here is where I got stuck for a 
month. "When is rock not rock" means that you 
can walk through the wall just to the left of the 
sign! Once through watch out for a section of 
corridor that turns you around. Going down the 
corridor to the right of where you walk through 
the wall, go 3 steps after the jog in the corridor, 
then turn aroimd. You should see a wall with a 
hook on it. This level is the last one with water, 
fill up (there is a fountain near the stairs down). 
At the sign "What is tmder foot is soon over head" 
you will have to walk over floor trips that cause 
wall guns to shoot at you. I found that the way 
through is to step on the first one and just take the 
shot. As long as you are on the trip it will not 
shoot again. You can heal and sleep in place. 
Check the weight of Corbomite and you will 
understand "Lighter than a feather". 

Level 10 - At the place marked "Zooom", 
once you step forward you are taken on quite a 
ride! Click Right two or three times to get off. 

Level 11 - The entrance to this level is nasty! 
It is just a four by four square, but the direction 
you travel and where you turn around determines 
where you are! So, by going around first one way 
then another you must first find a key, then a 
locked cell with a chest with another key in it. 
Returning to the square find a keyhole, then 
return to the cell. The back wall of the cell will be 
open to the rest of the maze. I have not found a 
way to get back to level 10 from here. Once you 
have picked up the Diamond Edge sword the 
corridor will fill with poison gas. You cannot nm 
out of here, to do so killed me every time. You 
must stand and take it (healing if you need). Once 
the gas has dissipated you can slowly exit. Later 
on you will run into water monsters. I could only 
hit them with the Vorpal Blade, but there is 
another strategy to use on them. They are slow, so 
you can "Calm" them into retreating until you get 
to a section of corridor wide enough to pass them, 
or attack and retreat to lure them to a wide place. 
Then just go on by, they are too slow to follow 
very far. These monsters can go under doors I At 
the far end of this level (just past the stairs down) 
is aroom with seven coin slots, and you will have 
two coins. From the first slot to the right, going 
counterclockwise, here' s what's behind the slots: 
Magical box, food, cross key, two coins, magical 
box and Ful bomb, Ful bomb, Ven bomb. 

Level 12 - Caution, there are almost invisible 
holes in the floor in the first room you enter. As 
you enter the room there is a click which opens 
the holes, just back up for another click which 
closes the holes. This level has knights in armor. 



really tough, use the door trick to help kill them. 
The knight behind the topaz door is carrying the 
emerald key.There is abutton in the secondroom 
beyond the emerald door that opens the door 
diagonally way across the maze (among other 
things there is a skeleton key there). Beware! 
There is a place that has a sign "Cowards will be 
himted dovm and killed" and three doors behind 
which are spidery monsters. If you turn and go 
back all three doors open and you are chased by 
many of those monsters. The best thing to do is 
rest tf you need, then open a door (all three doors 
go into the same room). DO NOT ENTER! If you 
do, this will open the other two doors. Use the 
door trick on these monsters, you need all the 
help you can get Good luck! This is the level you 
find the last Ra key you need for level 7, if you 
continue to the end of this level you will find a 
skull to enter the stairway back up. 

Level 13 - Here you meet Lord Chaos, but you 
can't defeat him yet. Just around the Flame 
monsters to your right is the corridor that leads to 
the stairs down. There is another way down if you 
have a skeleton key and the winged key. 

Level 14 - Here lies the dragon, dangerous but 
slow. I defeated him by mov ing around to his side 
or rear and attacking (took a long time! ). You can 
hear his fireball before you can see it so if he is 
facing you be prepared to sidestep! However, to 
defeat him is not absolutely necessary to win the 
game, you can run faster than he. At the other end 
of the room (or to your left if you use the winged 
key) there is a door that needs a key that you can 
find under a pile of ashes near that end of the 
room. In that room is the Gem, and once you have 
activated the Firestaff with it as you exit there is 
a click and all exits to level 12 are sealed! You 
must now confront Lord Chaos. Good luck, be 
sure to save before you try! 

This is by no means a complete giveaway of 
the game, there is much more to each level, and 
different strategies to use with different mon- 
sters, but at least you have enough to help you get 
past some of the more difficult parts. Have fun! 

® I have tried to deprotect this game, but so 
far all I have found is that you can sector copy it 
with Copy II Plus, but this copy will not save a 
game. There is a file called "Bad Blocks" which 
leads to block $ 1 7 which has information in it but 
the block information in the data header is differ- 
ent from the address header. Also, in trying to 
find character information on the save disk, the 
information is coded somehow, and in trying to 
compare two saved games the two files are al- 
most completely different! How do they do that? 
Then in changing some of the information that is 
the same I ran into a checksum problem (switch- 
ing two bytes allowed the disk to restore a game, 
but changing a byte gave a "the game is dam- 
aged" message. Well, good luck to whoever 
takes up this challenge! 

Softkey for... 

The Childrens Writing and Publishing 
Center 
The Learning Company 
I have managed to deprotect "The Childrens 
Writing and Publishing Center", a kids desk 
publishing program. Following my favorite 
method of finding the error message that is dis- 
played when a copied disk is booted, then finding 
JSR's above that and substituting EA's or 
BREAKS imtil something interesting happens I 
found that changing block #3D8 byte 082 to EA 
EA EA did the job. 



James E. Bulman 
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Softkey for... 

Planetfall 

Four-in-One Infocom Sampler 

Infocom 

Requirements: 

COPYA A Sector Editor (I used COPY Il-t- 8.3) 

A Blank Disk 

I wanted to write to ask a question so I figured 
I would throw in a couple of old Softkeys. Al- 
though these programs are not listed by title in 
your catalog of back issues, the publisher (In- 
focom) is. I'm sure most of your subscribers 
know enough to check all the softkeys for a 
publisher when trying to crack a program, but 
some of your newer readers may not For these 
programs I used the softkey for Zork in by Jack 
R. Nissel from Issue 51. So here goes: 

1. Boot your IX)S 3.3 System Disk 
CALL-151 

B925:18 60 
B988:18 60 
BE48:18 
B8FB:29 00 
RUN COPYA 

2. Make the following sector edits to the copy you 
just made: 

I[h Ssl Byjs Emm Ifi 

$00 $02 $5D BC AD 

$FB-FCC9BC 29 00 

3. Write the change back to disk. 

©I recently purchased ARKANOID I. Sev- 
eral times (but not always) while playing the 
game portions of the screen contain garbage and/ 
or additional blocks appear (some can be de- 
stroyed and some cannot) and/or "alien life- 
forms" shaped exactly like the "vans" descend. 
This has occurred at different levels. 

I called Taito's Customer Service Depart- 
ment and was told that it was definitely a soft- 
ware problem. I received a replacement disk 



(after almost two months of waiting) but it does 
the same thing! 

I use an early model Apple lie (5.25" ROM 
only) with A.E.'s Z-Ram Ultra 1 (512K addi- 
tional RAM). I use an Apple mouse with the 
game as I foimd the joystick to be much too 
sensitive. 

I had a friend of mine try the game on his im- 
enhanced lie and it appears to work fine. 

Has anybody else experienced this problem? 
Is there some sort of incompatibility ttiat Taito 
has overlooked or do I have a hardware problem? 



PA 
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Softkey for... 

GBA Championship Basketball 

9 

Requirements: 

One blank disk 

Fast copier (Super lOB) 

or 
COPYA (with POKE 47426,24) 
Sector Editor 

The softkey is the same as the one in COM- 
PUTIST#55 for Activision's Paper Models and 
COMPUTIST #65 for Rampage. The standard 
Activision protection. 

1. Copy the disk * 

2. Search for A9 56 85 FD A9 ... 38 2A 25 FC 
(The "..." means all of the bytes in between.) 
and change to EAEAEA...EAA9FF. I found 
the code on track $00, sector $0A, byte $58 
through $95. 



TX 



Ricky Lee Wallace 

Riclt's Hello 

RICK'S HELLO is a simple solution to my 
own need for a DOS program that I could boot 
into that would provide a menu and require 
entering only the program name to launch into it. 
This is nothing fancy, but it works. Here's a brief 
description. 

Line 10: Sets 80-column display. A jjersonal 
preference. 

Line 20: Prints the menu. 
Line 30: First of two error traps used to 
distinguish file types. 

Line 40-70: Prompts you to enter the name, 
defines a string, waits for input and then attempts 
to simply "RUN" the program. If the program 
happens to be a binary or text file it will be 
handled by an error trap. Misspelled names and 
parameter mistakes are also handled. 

Line 500: Checks memory location 222 for 
the EXDS error code that signals ttie use of incor- 
rect file fype for DOS conunand given. Sirtcfe it 
had been "RUN", that means it's either a bih^ 
or a text file. Program flow is directed to line 600 
for error correction. 

Line 505: Checks location 222 for the error 
code for the "FILE NOT FOUND" error. If that 
was the problem, itprompts you to enter thename 
again and returns program flow to line 50 for that 
input 

Line 508: Checks for the error code that 
signals the use of an incorrect parameter. Prompts 
you to be more careful and againretums program 
flow to line 50 for the new input 

Line 600-700: This handles the FILE TYPE 
MISMATCH error. The poke statement cancels 
the first "ONERR" statement B$ is redefined to 
the BRUN command, and a new error handling 
location is defined. The program then attempts to 
BRUN the file. 

Line 1000: This is where the program ends up 
if it was a text file that could be executed. B$ is 
redefined and the file is EXECuted. 

©Can anyone give me some info on the built 
in mouse handling routines in ROM? I know they 
are located at $C400 -> $C4FF along with the 
interrupt handling routines. I'd like to write some 
software utilizing the mouse and I really don't 
know where to start I'm using a Laser 128, but 
the firmware would have to duplicate the //E 's. 

RICK'S HELLO 

10 PRINT CHR$ (4); "PR#3" 

20 PRINT CHR$ (4); "CATALOG" 

30 ONERR GOTO 500 

40 PRINT "EnterOprogramOnameOto 

Orun." 
45 B$ = "RUN" 
50 INPUT A$ 

60 PRINT CHR$ (4) ;B$;A$ 
70 END 
500 IF PEEK (222) = 13 THEN GOTO 

600 
505 IF PEEK (222) = 6 THEN PRINT 

"WrongOname! lOTryOagain." : GOTO 

50 
508 IF PEEK (222) = 11 THEN PRINT 

" Incorrect OparameterOorOf orm ! ObeO 

moreOCAREFULLO&OenterOnameOAGAIN 

! ! " : GOTO 50 
600 POKE 216,0:B$ = "B" + B$: 

ONERR GOTO 1000 
700 PRINT CHR$ (4) ;B$;A$ 
1000 B$ = "EXEC" : PRINT CHR$(4) 

;B$;A$ 

Checksums 

10-$99BE 50-$409E 508-$El3C 

20-S8C25 60-$80C8 600-$0AE9 

30-S805E 70-570FF 700-$3a5A 

40-S7EE1 500-$0DlF 1000-SDE44 

45-$'!200 505-$C6Dl 



Sang Jin Hong 

I'vejuststartedsubscribingtoCOMPUnST. 
In fact, I've just come to this coimtry. I've been 
using an Apple //e for 5 years in Korea where I 
heard about COMPUTIST. I read a copy of 
Computist It was good, so when I came here, I 
subscribed. 

And here is my first softkey to COMPUTIST. 
When I found it I thought it might work for all 
software made by Quicks ilver,like Victory Road, 
Platoon, Heavy Barrel, etc. Those programs are 
better than before (Ikari Warriors, Commando, 
etc) with good graphics, using double hi-res, and 
more stages. But they don't have scrolling and 
they should be better. Anyway, those programs 
are pretty good. I tested die softkey on Platoon 
and Heavy Barrel. I couldn't test on Victory 
Road. But I think it will work. 

Softkey for... 

Platoon 

Heavy Barrel 

Quicksilver 

When I copied with a normal copy program 
(Locksmith Fastcopy ), the copy didn ' t boot pass 
track $00. 1 searched track $00 (using Copy ][ 
Plus 8.2) and foimd a check routine on sector 
$0E. When the check fails, it makes the disk 
reboot with a JMP SC600 (4C 00 C6), so I 
changed the JMP to EA EA EA. 

1 . Copy both sides of the disk with a normal copy 
program, like COPYA or Locksmith Fast- 
copy. 

2. Sector edit side A. 

li Sfil ByJ£ From Iq 

$00 $0E $4A-4C 4C00C6 EAEAEA 

©Where can I get a 65C802? 

Jameco Electronics sells the 65C802 for 
$15.95, however, their minimum order is 
$25 so you will need to order something else 
to bring up the total amount. Their address 
is: 1355 Shoreway Road, Belmont, CA 
94002. They take charge card orders at 
(415) 592-8097. RDEXed 

©On page 4 of #67. It says if I install a 
Modified CD ROM on the mother board, th£:n I 
can change the bpen^pple ctrl reset vector to 
point to the monitor. How cart I change it? I mean 
where? Or should I buy a modified CD ROM 
from someone? I have a ROM writer. 



Joseph P. Karwoski 
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Softkey for... 

How the West was One + Three x Four 

Sunburst 
Requfreinents; ' ~ -' '--" -'■;•"•" •:->■■•> 
, A way into the monitor - 1 use^ iJiy Hgs ^idi ttie 
"visit monitor" option front the control panel. 
Super lOB 
Swap controller 
Blank disk 

How the West was One + Three x Fotir by 
Simburst is great for younger children. It teaches 
them to add, subtract multiply, and divide. But 
this is not a review, so on with the softkey. 

1. Boot the disk. When the disk stops spinning, 
jump into the monitor. 

2. Move the RWTS to a safe place - someplace 
where you can boot a normal disk without 
destroying the RWTS. I used: 

1900<B800.BFFFM 

3 . 1 then booted my disk that contained my Super 
lOB and my swsq) controller. I stopped the 
HELLO program by using Ctrl C, before it had 
a chance to execute. I booted the disk with 
C600G. 

4. BSAVE the RWTS to be used in the swap 

controller. 
BSAVE RWTS.HOW,A$1900,L$800 

5. 1 loaded the swap controller and changed line 
10010 to BLOAD RWTS.HOW - don't forget 
to save this! 

6. 1 then re-booted my disk with Super lOB , swap 
controller, and the RWTS.HOW file. 

7. Merge the swq) controller and Super lOB, and 
then copy the program. 

8. 1 then used Copy Il-t- to put a fast DOS on the 
disk. If you don't have a fast DOS, a normal 
DOS 3.3 wUl work - it will just load slower. 

You are now done, and you can have the 
children work with the program without fear of it 
being destroyed - you now have a back-up! 

Softkey for... 

Where in North Dakota is Carmen 

Sandiego 

Broderbund 

Requirements: 

Copy n-h 

Blank disk - you will need 2 sides 

This game was developed for the Dept of 
Education in North Dakota by a group of educa- 
tors and Broderbund - they did a great job! I think 
every state should get together with Broderbund 
and have them do a game like this for their Dept 
of Education, it is a fantastic learning tool! 

I was surprised to see that I could copy the 
disk with Copy II-I- using the Disk/w format 
option. Of course, the disk would not boot - no 
surprise. I needed someplace to start so I booted 
a normal" DOS disk and tried to CATALOG the 
disk. I got a peek of something that was interest- 
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ing, just before my computer "went crazy". It 
looked like it said "PROLOK" at the top of the 
screen. This told me that "at least" one of the 
protections used was the PROLOK method. There 
is a very good article on the PROLOK method in 
issue 60 bv Stephen Lau. I then searched the disk 
for the bytes: AO 07 BD 8C CO 10. 1 found these 
on track 00, sector 06. Here is the softkey: 

1 . Copy the original to the blank disk - 1 used the 
Disk/w format option from Copy n+. You will 
gel NO errors. Side B is not protected. 

2. Using the sector editor, make the following 
edits: 



Ids Sci Byia £ram 



IQ 



6 4344 


D0F4 


EAEA 


4C4D 


D04A 


EAEA 


55-56 


DO 41 


EAEA 


68-69 


D0F4 


EAEA 


6C- 


A007BD8CC0 


EAEAA9FC85 




10FB99FOOO 


F085F3A9EE 




EA8810F4 


85F185F2 



Your done! Enjoy thegamewithoutfear.Idid 
not find any other protection on this disk. 

For the people who are interested, I will try to 
explain what all of this is doing. Following, you 
will find a listing of the original code and the new 
code, as seen from the sector editor of Copy II-i-. 

Original code: 

0E2B:8D 8C CO LDA C08C,X read a byte 

0E2E:10FB BPL 0E2B(-05) branch on high bit cir 

0E30:88 DEY decrease Y register by 1 

0E31 :F0 65 BEQ 0E98 (+65) if enough - go bomb 

0E33:C9 05 CMP #05 find data header 

0E35:D0 F4 BNE 0E2B (-0C) if not, re-read 

0E37:A0 00 LDY #00 

0E39:BD8CC0 LDA C08C,X 

OE3C:10FB BPL 0E39(-05) 

0E3E:88 DEY 

0E3F:F0 57 BEQ 0E98 (+57) if enough - go bomb 

0E41 :C9 E7 CMP #E7 find first E7 

0E43:D0F4 BNE 0E39(-0C) if not, re-read 

0E45:BD8CCO LDA C08C,X read second byte 

OE48:10FB BPL 0E45(-05) 

0E4A:C9 E7 CMP #E7 should find E7 

0E4C:D0 4A BNE 0E98 (+4A) if not E7 - go bomb 

0E4E:BD 8C CO LDA C08C,X read third byte 

0E51:10FB BPL 0E4E(-O5) 

0E53C9 E7 CMP #E7 should find E7 

0E55:D0 41 BNE 0E98 (+41 ) If not E7 - go bomb 

0E57:BD8CC0 LDA C08C,X dear the latch 

0E5A:A010 LDA #10 

0E5C:24 80 BIT 80 compare ace and mem 

0E5E:BD8CC0 LDA COSC.X 

0E61:10FB BPL 0E5E(-05) 

0E63:88 DEY 

0E64:F032 BEQ 0E98(+32) if tried enough -bomb 

0E66C9 EE CMP #EE should find EE 

0E68:D0 F4 BNE 0E5E (-0C) if not, re-read 

0E6A:EA NOP 

0E6B:EA NOP 

0E6C:A0 07 LDY #07 

0E6E:BD8CC0 LDA COSC.X 

0E71:10FB BPL 0E6E(-05) 

0E7339F0 00 STA 0OF0,Y 

0E76:EA NOP 

0E77:88 DEY 

0E78:10F4 BPL 0E6E(-0C) 
continue program 

New Code: 



0E26:8D8CC0 


LDA C08C,X read a byte 


0E2E:10FB 


BPL 0E2B(-05) branch on high bit cIr 


0E30:88 


DEY decrease Y register by 1 


0E31:F065 


BEQ 0E98(+65) if tried enough-bomb 


0E33.C9D5 


CMP #05 find data header 


0E35:DOF4 


BNE 0E2B(-0C)ifnoUe-read 


0E37A000 


LDY #00 


0E39:BD8CC0 


LDA C08C,X 


0E3C:10FB 


BPL 0E39(-05) 


0E3E:88 


DEY 


0E3F:F057 


BEQ 0E98(+57) Iftried enough- bomb 


0E41:C9E7 


CMP#E7 find first E7 


0E43:EAEA 


NOP NOP do nothing '1 


0E45:BD8CCO 


LDA C08C.X read second byte 


0E48:10FB 


BPL OE45(-05) 


0E4A:C9E7 


CMP #E7 should find E7 


0E4C:EAEA 


NOP NOP do nothing '2 


0E4E:BD8CC0 


LDA C08C,X read third byte 


0E51:10FB 


BPL 0E4E(-05) 


0E53:C9E7 


CMP #E7 should find E7 


0E55:EAEA 


NOP 


0E56:EA 


NOP do nothing *3 


0E57:BD8CC0 


LDA C08C,X clear the latch 


0E5AJ^010 


LDA #10 


0E5C:24 80 


BIT 80 compare ace and mem 


0E5E:BD8CC0 


LDA C08C,X 


0E61:10FB 


BPL OE5E(-05) 


0E63:88 


DEY 


0E64:F0 32 


BEQ 0E98 (+32) if tried enough-bomb 


0E66:C9EE 


CMP#EE should find EE 


0E6e:EA 


NOP 


0E6g:EA 


NOP do nothing *4 


0E6A:EA 


NOP 


OESBiEA 


NOP 


0E6C:EA 


NOP 


0E6D:EA 


NOP db nothing '5 


0E6EA9FC 


LDA #FC 


OE70:85FO 


STA FO 


0E72:85F3 


STA F3 


0E74:A9EE 


LDA #EE 


0E76:85F1 


STA F1 


0E78:85F2 


STA F2 



continue program 

The protection works like thi5:Read informa- 
tion off the disk. Find the beginning of the header 
and then read from there. If the program does not 
find the beginning of the header in a certain 
number of tries, go BOMB. After it finds this on 
the disk, the program begins to look for E7. If it 
does not find it, it will re-read imtil it has read 
enough - then it goes to the BOMB. After it finds 
the first E7 , it reads again. This time, if it does not 



find E7 it will go and BOMB. This is the main 
idea of this protection. 

What the new code will do is this: Go ahead 
and read the header. Go read another byte, but 
don't compare it to E7. Read another byte, and 
again - don't compare it to E7. Read again, but 
don't keep reading until 0E64 is true. Then we 
load the accumulator (the A register) with FC and 
store it, load the ace with EE and store that. Then 
continue with the program. 

I hope this will help some of you with the 
PROLOK method of protection. Maybe it will 
even help some of you with understanding other 
protection schemes. 



PA 



George Sabeh 

I would like to share a softkey and a collection 
of APTs with your readers. I have been able to 
develop some of these APTs at the urging of a 
friend and fellow Computist. I have not checked 
back issues of Computist to see if some of these 
were published previously. I would like to apolo- 
gize to anyone who may have contributed a 
similar APT, and will send the rest of my APTs 
at a future date. 



Softkey for.. 



Sokoban 
Spectrum Holobyte 



1. Boot your DOS 3.3 system disk. 

2.Tell EXDS to ignore checksum and epilog errors 
and use COPY A to copy both sides of the disk. 
POKE 47426,24 
RUN COPYA 

3. Make the following sector edits to side 1 of the 
copy. 

Trk Set Bvte From Ifl 

00 05 12 A62BBD89C0 A62BA9E785 

BD8EC0A980 F8A9FC85F9 

85FDC6FDF0 A9EE85FAA9 

7120AFF0B0 E785FBA9FC 

6C A5 F9 C9 00 85 FC A9 EE 85 

D0F1A0 00BD FD85FEA94C 

8CC010FB88 7CF0FC85FF 

Write the sector back to disk. 
Advanced Playing Techniques 

The following APTs will be listed as a string 
to search for since there are many cracked ver- 
sions of some of these programs. This is true 
when some of these cracked programs are in a 
binary file format and the edits change from one 
version to another. 

Beer Run — Sirius 

Scan for D4 62 A9 03 8D IF 62 and change 
the 03 to XX, where "xx" is the number of men 
wanted. 

Money Munchers — Datantost 

Scan for 1 A A9 02 8D 02 03 and change the 
A9 02 to A9 XX, where the xx represents the 
number of men wanted. 

Teleport — Cavalier 

Scan for 49 42 CE 14 41 AD 14 and change to 
49 42 EA EA EA AD 14 for unlimited lives. 

Mars Cars — Datamost 

Scanfor2571 A9 03 8D 80 and change the 03 
to the number of cars desired. 

Jawbreaker II — Sierra 

Scan for 85 9A A9 03 85 8A and change the 
03 to the desired numba- of lives. 

Jouster — 1 

Scan for A7 2C A9 03 8D 5 1 and change the 

03 to the number of lives. 

Pooyan — ^Datasoft 

Scan for AO 01 A9 04 A6 A3 and change the 

04 to the number of lives desired. 

Evolution — Sydney 

Scan for 85 1 5 A9 05 85 1 6 and change the 05 
to the number of lives wanted. 

Spys Demise — Penguin 

Scan for 10 CD A9 05 85 27 and change the 

05 to the number of lives. 

Gold Rush— Sentient 

Scan for 54 14 A9 03 8D 33 and change the 03 
to the nimiber of lives. 

Snack Attack — Datamost 

Scan for ID A9 03 85 EA and change the 03 
to the number of lives. 

Swashbuckler — Datamost 

Scan for IQ 60 A9 03 8D C2 and change the 
03 to the number of pirates wanted. 

Apple Panic — ^Broderbund 

Scan for 74 18 CE 2E 72 20 and change to 74 
18 EA EA EA 20 for unlimited lives. 

Buzzard Bait— Sirius 

Scan for A7 09 A9 03 85 40 and change the 03 
to the ntmiber of lives. 

Cannonball Blitz— Sierra 

Scan for 6B 12 A9 02 8D 12 and change the 
02 to the number of lives. Maximum is 7F. 

Sammy Lightfoot — Sierra 

Scan for 96 A9 03 8D 4E and change the 03 
to the number of lives. Also Scan for A7 140000 
00 and change the first 00 to the level desired. 
Maximum is OB. 

Ice Demons — Morningstar 

Scan for 10 FB A9 05 8D ED and change the 
05 to the number of lives. 

Halloween — ^Microsparc 

Scan for 85 80 A2 04 8E F6 and change the 04 
to the number of lives. 



Sea Fox — Broderbund 

Scan for 7F 66 A9 03 8D C3 and change the 
03 to the number of lives. 

Star Thief— Cavalier 

Scan for 10 FA A9 08 8D 3B and change the 
08 to the number of lives. 

Millipeed— ? 

Scan for 85 55 A9 03 85 54 and change the 03 
to the number of lives. 

Ribbit— Picadilly 

Scan for DO OD A9 03 8D IC and change the 
03 to the number of frogs wanted. 

Free Fall— Sirius 

Scan for B6 77 A9 03 8D 32 and change the 
03 to the nimiber of lives. 

Snapper — Silicon Valley Systems 

Scan for 85 E7 A9 03 85 DA and change the 
03 to the number of lives. 

Wargle — Hayden 

Scan for 38 68 A9 05 85 1 6 and change the 05 
to the number of lives. 

Eliminator — Adventure International 

Scanfor 19 A903 8D02 12 and change the 03 
to the number of lives. 

Mr Cool— Sierra 

Scan for E3 5C A9 03 8D BC and change the 
03 to the number of lives. 

Jumpman — Epyx 

Scan for A2 04 A9 06 CA 9D and change the 
06 to the number of lives. Should scan both sides 
of disk since it can be booted from side 2. 

Crossfire — Sierra 

Scan for AO B4 A9 03 8D 16 and change the 
03 to the number of lives. 

Fire and Ice — ? 

Scan for 85 66 A9 02 85 6F and change the 02 
to the number of lives wanted. 

Genetic Drift — Broderbund 

Scan for 85 2E A9 03 85 1 and change the 03 
to the number of lives wanted. 

Canyon Climber — Datasoft 

Scan for 85 Bl A9 03 85 DF and change the 
03 to the number of lives. 

Neptune — Gebelli 

Scan for 85 86 A9 04 85 87 and change the 04 
to the number of lives. 

Space Quarks — Broderbund 

Scan for 85 8E A9 03 85 BC and change the 
03 to the number of lives. 

Night Crawler—? 

Scan for 85 1 A A9 03 8D FC and change the 
03 to the number of lives. 

Snake Byte— Sirius 

Scan for 55 72 A9 02 8D 5E and change the 

02 to the number of snakes wanted. 

Falcons — Picadilly 

Scan for FF 04 A9 03 8D FC and change the 

03 to the number of lives. 

Serpentine — Broderbund 

Scan for 85 CE A9 03 85 D8 and change the 
03 to the number of serpents. 

Tubeway II — Datamost 

Scan for 11 60 A9 03 85 A3 and change the 03 
to the number of lives. 

Hellstrom— ? 

Scan for CF 63 A9 03 8D 88 and change the 

03 to the number of lives. 

Thunderbombs — ^Penguin 

Scan for 57 09 A9 04 8D 00 03 and change the 

04 to the number of lives wanted. 

Caverns of Calisto— Origin 

Scan for 85 90 A9 04 85 8 A and change the 04 
to the number of lives. 

Crystal Castles—? 

Scan for 85 F7 A9 02 85 54 and change the 02 
to the number of lives. 

Oils Well— Sierra 

Scan for 28 02 A9 03 8D 25 and change the 03 
to the number of lives. 

Electro Arena — ? 

Scan for 85 7B A9 03 85 63 and change the 03 
to the number of lives. 



Michael Warren 



IL 



The following playing tips are offered for 
anyone who may be interested. Some are old, 
some are new, but all of them are useful. Some of 
the information contained in the tips I discovered 
for myself, other tips I have gotten from my son, 
other players, BBS's, or magazines. 



Playing Tip for... 

Bard's Tale I 

Electronic Arts 

1 . To enter Kylearan's tower, place the eye in 
the statue on the top level of the Castle. You will 
the be teleported to the front of the tower. 

2. To enter Mangar's tower you need the 
Onyx key which lets you use the staircase in the 
sewers. 

3. You can get at least 50,000 experience 
points for each party member if you go into the 
castle and teleport, from the entrance to 5 North, 
12 East, and 2 Up. You will fight 4 groups of 99 
berserkers, if you survive you get the points. 

4. The password to enter the dungeon in the 
Mad God's Temple is "TAR J AN". 



Item Locations 

1 . The Eye- 1 9 North, 20 East, 2 Down in the 
catacombs. 

2. The Crystal Sword- North, 19 East, 
Down, in the castle. 

3. The Silver Square- North, East, 1 Up in 
the castle. 

4. The Silver Triangle- 20 North, 2 East, 
Down, in Kylearan's tower. 

5. The Silver Circle- 15 North, 4 East, 1 Up, 
in Mangar's tower. 

6. The Onyx Key- 13 North, 17 East, 1 Up, in 
Kylearan's tower. 

Playing Tip for... 

Wizardry (Proving Grounds 

of the Mad Overlord) 

Sir-Tech 

M ake a bishop, then enter the Proving Grounds 
and have him identify item "9" or item "S" or 
item "J". You will love what happens. It may take 
more than one attempt so keep trying. 

Playing Tip for... 

Neuromancer 

Interplay 

Bank of Zurich and Justice System require the 
use of special software ("Sequencer") to enter. In 
many cases the only way to enter the higher 
security areas of the boards is through "Cyber- 
space". There are many other boards that can 
only be entered from Cyberspace. 

1. Don't sell body parts if you can avoid it, 
there are other ways of making money. If you 
have to sell body parts do not allow your 
constitution to go below 1400 or you will have a 
very difficult time surviving in cyberspace combat 
against the more powerful AI's. 

2. Need a quick $ 1 0,000? Join up with Armi- 
tage. 

3. Still not enough money? Get a job! ! 

4. Still greedy? Rob a Bank!! 

5. Having trouble getting in to see the Panther 
Modems? Is Larry Moe a pain in your skill chip? 
Have him arrested! 

6. Good Ice Breakers: Decoder, Blowtorch, 
and Hammer. 

Better Ice Breakers: Doorstop and Drill. 
Best Ice Breakers: Concrete, Depthcharge, 
and Logic Bomb. 

7. Best Viruses: Python and Thimderhead. 

8. Is the ICE giving you frostbite? Try a little 
"Armor"! 

9. Want to know what your getting into before 
you try to break in? Try "F'robe"! 

10. Nothing is "Free"!! 

11. Remember! Save games frequently, read 
all messages on the boards for clues and buy the 
best possible cyberdeck you can. I recommend 
the "Samurai Seven". 

Playing Tip for... 

Dungeon Master 

FTL Games 

This is one of the most challenging games for 
the GS that I have ever played. The graphics are 
superb! I recommend it highly to anyone who 
enjoys fantasy role-playing. The following infor- 
mation I gained by myself after many hours of 
play and experimentation. Hof)efully it will make 
the game a little easier for the rest of you. 

P.S. Anyone out there with a softkey for this 
game, a mapping utility or just more hints please 
send them in. 

Casting spells 

Casting spells in Dungeon Master requires 
the use of four sets of symbols. The four groups 
are: Power, Element, Form and Aligiunent. There 
are six symbols within each group. By combin- 
ing the various symbols different spells may be 
cast. The following is a list of the spell combina- 
tions I have deciphered. I used the Power symbol 
"LO" irj each one to simplify the chart. 



Wizard Spells 


LO + FUL 

LO + ZO 

LO + FUL + IR 


= light 

= open doors 

= fireball 


LO + OH + VEN 
LO + DES + VEN 
LO + DES + EW 


= poison gas 
= poison spray 
= weakness 


LO + OH + EW+RA 


= unknown effect 


LO + OH + EW+SAR 


= unknown effect 


LO + OH + KATH + RA 
LO + OH + IR + RA 
LO + OH + IR + SAR 


= lightning 
= strong light 
= darkness 


LO + ZO + KATH + RA 


= item, use unknown 



Priest Spells 

(All spells except Footprints and Protection re- 
quire a flask) 

LO + YA = stamina potion 

LO + VI = healing potion 

LO + YA + IR = protection from ? 

LO + YA + BRO = shield potion 

LO + VI + BRO = neutralize poison 

LO + ZO + ZEN = unknown effect 

LO + YA + BRO + ROS = magic footprints 

LO + YA + BRO + NETA = skill potion 

LO + OH + BRO + ROS = skill potion 

LO + FUL + BRO + KU = skill potion 

LO + FUL + BRO + NETA = protection from fire 

LO + ZO + BRO + RA = mana potion 

Ability 

The first 8 levels of ability are as follows: 

Neophyte 
Novice 
Apprentice 
Journeyman 



Readers Data Exchange 



COMPUTIST #73 



Craftsman 
Artisan 
Adept 
Expert 

Points to Remember 

It is very important to pay close attention to 
the floor aiKi walls otherwise you may overlook 
items, buttons, levers or messages. For this rea- 
son Inight illumination is a necessity. Equally 
important is examining, with the cursor "Hand", 
anything that looks unusual. Keep track of your 
food and water supply, unless you like starving or 
dying of thirst. 

Tactics 

Be cautious in your encounters, especially 
with monsters you have never met before. Al- 
ways leave yourself an escape path. As the saying 
goes it is sometimes better to "Fight then run 
away and live to fight another day". In fact, a 
retreating battle will often tip the odds in your 
favor if you have sufficient missile weapons and 
spell points. Try to have a few healing potions 
and neutralize poison potions with you to get you 
out of bad spots. There is nothing worse than 
having one or two dead characters on your hands 
and having to haul their bones across a level and 
up one or two to the closest Temple to revive 
them. Frequent game saves also help to avoid this 
irritating situation. Unfortunately, you can only 
save one game on the disk so you may want to 
make several save disks. That way you can have 
several game positions available in case you 
discover you have missed something vital. There 
are many tricks and puzzles in the game. Be 
systematic in your approach to them, take notes 
of what solutions you have tried and remember 
that sometimes the most obvious solution is the 
correct one. 

Maps 

Accurate maps are a must in this game! I 
know how tedious mapping can be but success 
depends on them. It is unfortunate that FTL 
Games didnotsee fit to include Auto-mapping in 
this program for it would have greatly enhanced 
the entertainment value of an otherwise excellent 
product. 



Don Westcott 



CO 



These Ilgs softkeys were derived from my 
brother's Apple Link. This service offers many 
useful and entertaining contributions. I am in the 
market for a modem now so I can get it too. I used 
Copy nplusv8.2to copy these disks and perform 
the sector edits. 



Soflkey for... 

Battle Chess GS 
Interplay 

This one is from "Cheezer". The Battle Chess 
disk isn'tdirectly copy-protected. The protection 
is looking up a chess move from Appendix A of 
the manual. This fix allows you to enter anything 
and begin playing. 

1. Copy the disk. 

2. Search for 80 OC C2 30 C6 OC FO 03 4C 24 AB 
4C 76 BD on the copy (I found it in Block 
$417) and change it to EA EA C2 30 C6 OC EA 
EA EA EA EA EA EA EA. 

Softkey for... 

Bubble Ghost GS 

Accolade 

This one is from "Anon". The Bubble Ghost 
disk isn't directly protected either. It's protection 
is matching a room displayed on the screen with 
one from an unreadable sheet of brown paper. 
The download file I got this from said the byte 
sequences are in Block $17 A. On my version it 
was in Block $17C so you may need to search. 

1. Copy the disk. 

2. Do these sector edits to the copy: 

Blk Bvte From To 

17C 174-178 AD0OOOFO2E 9C00 0O8O2E 
1A2-1A5 2200000000 AFOOOOOOOO 



Softkey for... 

The Duel: Test Drive II GS 

Accolade 

This one is from "Static Vengeance". 

1. Copy the disk. 

2. Do these sector edits to the copy: 

Blk Byte From To 

$169 19B-19E 22E3C4 03 AFE3C4 03 

1F3-1F6 22E3C4 03 AFE3C4 03 

$191 1D8-1DB 22E3C4 03 AFE3C403 

$199 125-128 F016F401 80 16 F4 01 

The following two APT's were derived frran 
BASIC programs also from Apple Link. I sent 
them to RDEX some months ago and as of 
Computist #69 they had not been published yet. 
I stated that they didn't work on my versions. 

Since then I decided to look at the listings to 
see what was being attempted. I don't know why 
the programs didn't work but making the con- 
tained sector edits with Copy 11 plus did work! 

Advanced Playing Technique for... 
Warlock GS 
Three-Sixty 

This one is from "Anon". This A.P.T. gives 
you tmlimited vitality. The program this came 
from tried to load the file WARL0CK.SYS16, 
alter it and rewrite it. I did it this way: 

1 . Copy the disk. Apparently it isn't protected. 

2. Do these sector edits to the copy: 

Blk Bvte From To 

$114 DC-DF ED 23 01 8D AD 23 01 AD 

17F-182 ED 21 01 8D AD 21 01 AD 

IDC-IDF EDF9 00 8D AD F9 00 AD 

Advanced Playing Technique for... 
Zany Golf GS 

Electronic Arts 

This one is from "Anon". This A.P.T. gives 
you unlimited strokes. The program this came 
from tried to load the file CODE, alter it and 
rewrite it. I did it this way: 

1. Copy the disk and deprotect it. I used the 
softkey in Computist #63, page 26. 

2. Do these sector edits to the copy: 

From To 

9D 4E 42 EA EA EA 

9D 4E 42 EA EA EA 

9D 4E 42 EA EA EA 

9D4E42 EAEAEA 

Note on Bilestoad 

I noticed "The Bilestoad" is on the Most 
Wanted List in Computist #69. The unprotected 
files for this game are in Softdisk #84. 



room atop his castle. Blow down the door using 
the Cannon. Don't go up the ladder. Then while 
you are up there, play the tune on the Harpsicord. 
Get the sandlewood box and then leave. The 
Amulet is in the underworld and the Crown in a 
room atop Blacktoms castle. 

Be level eight with 6,400 experience (just edit 
it). 

Quests 

Go to each Shrine, meditate, get your quest 
and go to the Codex. Do this for all 8 shrines. 

When you are done Lord British will come to 
you and say something like, "Thou hast been 
armed and ready". 

Do what the Codex says, and on the eighth 
level there is a room, look in the mirror. 

The mystical weapons are in the underworld 
at {E9.E9). (Use ctrl-2 or Ctrl shift 2.) 



aut 


Byte 


$64 


181-183 




193-195 


$67 


1C2-1C4 


$6E 


15D-15F 



The Dark Phoenix 



UT 



The APT info s^bmitted by Dark Phoe- 
nix was the same as Les B. Minaker's in 
issue #59,ppl3-15, so I decided not to print 
it. Here is the rest of the letter. ...RDEXed 



Playing Tip for... 

Ultima V 

Origin 

Helps, Hints, and How-To's 

In order to complete Ultima V you must do 
the following: 

Obtain all three shards from the Underworld. 
(They are in the most obious spots that anyone 
could find.) 

Use the shards to destroy the most annoying 
Shadowlords.Todothis, go to the casde opposite 
of the virtue. (Truth/Falsehood, Love/Hatred, 
CourageAI^oudarice, etc.) Get directly in front of 
the flame and yell the name of the Shadowlord, 
then pass a turn till its directly on the flame. Then 
throw the shard into the fire thus destroying the 
Shadowlord. 

Retrieve the Lord British items. The Scepter 
is in Stonegate, you'll need the Flying Carpet to 
get over the traps falling into the Stygen Abyss. 
You get the Magic Carpet from Lord British's 



6A92:x 

6179:EA EA EA 
IFOOG 

14A8:EA EA 
1D3D:EAEA 



Virtue 

Honesty 

Compassion 

Valor 

Justice 

Sacrifice 

Honor 

Spirituality 

Humility 



Other Important Info 

Mantra Word of Pow^r Dungeon 



AHM 

MU 

RA 

BEH 

CAH 



FALLAX 

VILIS 

INOPIA 

MALUM 

AVIDUS 



SUMM INFAMA 
CM IGNAVUS 
LUMM VERAMOCOR 



DECIET 

DISPISE 

DESTARD 

WRONG 

(UNKNOWN) 

SHAME 

(UNKNOWN) 

(UNKNOWN) 



Tune 



678-987-8767653 



Shadowlords 

Falsehood Faulinei 

Haterid Astaroth 

Cowardice Nosfentor 

Runes 

Found in any encyclopedia. 

Found in most imabridged dictionary. 

® I have not found a way, to keep the display 
from messing up when I cheat up the shards, and 
I can't cheat virtues. If you know how, write "to 
me in C/O the RDEX editor. 



Frank M Poloskv 
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This RDEX submissionwas one of the 
hardest files to edit. All of the text was 
uppercase and there was no common for- 
mat. It looked like it had been downloaded 
from a BBS in several pieces. I did the best 
I could to make it readable even though 
some of the info didn't make any sense to 
me. I hope it reads OK to you RDEXed 

Labyrinth 

Press 'esc KAY' (all at the same time) and 
press a number ( 1 -8) to go to that level or press 9 
to get more ships. 

^ A.E. 

EE1 :x where x=0 of ships 

7FDG 





Allen Ambush 




BLOAD ALIEN AMBUSH 




CALL-151 






60E9:x 


where 


x=# of ships 


4000G 


Allen Game 


start game 


8550:x 


where xisa number 



C050 C057 C054 
800G 

Apple Kong 
43F5:EA EA 
C050 C057 C054 
4000G 

Battle Zone 
MAXFILES1 

BLOAD BALLTLE ZONE 
CALL-151 

98A:x where x=itumber of tanks 

810G 

Beer Run 
BLOAD BEER RUN 
CALL-151 

C64:x where x=M of men 

800G start game 



Dungeon Master Characters 

This chart lists the names, skill levels and attributes of the pregenerated characters that are available in the Hall of Champions. This should 
enable you to choose characters more easily. 

Name Ftt Nm Esl Mz Hlth Stam 

Leyla Jmn . 48 60 

WuTse Nov App 45 47 20 

Mophus . . Jmn . 55 55 

Wuuf App Nov 40 50 

Boris Nov App 35 65 

Alex . Nov . App 50 57 

Tiggy Nov App 25 45 

Syra Nov App 53 72 

Gothmog . . . Jmn 60 55 

Gand App Nov 39 63 

Nabi App . Nov 55 65 

Hissssa App Nov . 80 65 

laido App Nov 48 65 

Leif App Nov . 75 70 

Linflas App Nov 65 50 

Daroou App Neo 100 65 

Halk Jmn . 90 75 

Stamm Jmn . 75 80 

Sonja Jmn . 65 70 

Azizi Nov App 61 77 

EUja Nov App . 60 58 

Hawk Nov App 70 85 

Chani Nov . App 47 67 

Zed Nov Nov Nov Nov 60 60 



Mana 

3 

38 

19 

30 

28 

13 

36 

15 

18 

26 

13 

13 

11 

7 

12 

6 





2 

7 

22 

10 

20 

10 



Stt 
40 
35 
42 
33 
35 
44 
30 
38 
40 
39 
41 
58 
43 
46 
45 
50 
55 
52 
54 
47 
42 
45 
37 
40 



Dex 

53 

53 

35 

57 

45 

55 

45 

35 

43 

45 

36 

48 

55 

40 

45 

30 

43 

43 

45 

48 

40 

35 

47 

40 



Wis 

45 

45 

40 

45 

55 

45 

50 

43 

48 

47 

45 

35 

40 

39 

47 

35 

30 

35 

39 

42 

42 

38 

57 

40 



Yit 

47 

47 

48 

40 

40 

40 

35 

45 

34 

33 

45 

35 

35 

50 

35 

45 

46 

50 

49 

45 

36 

55 

37 

50 



Mr 

45 
40 
40 
35 
45 
35 
59 
43 
50 
48 
55 
43 
45 
45 
50 
30 
38 
35 
40 
30 
53 
35 
47 
40 



35 

45 
40 
40 
40 
40 
40 
59 
43 
55 
55 
50 
45 
35 
45 
48 
55 
40 
35 
40 
35 
37 
40 



fNote: Jmn = Joumeyman, Nov = Novice, App = Apprentice, Neo = Neophyte, Mr = Magic Resistance, Fr = Fire Resistance. 



Bellhop 



Berserker 



Boio 



Borg 



where x=§ of men 



Try pressing shIft-ctrl-M-N while you are 
playing. 

Bruce Lee 
For unlimited men: 



m 


Set Bvta 


From 


IQ 


04 


02 7E 


CE2A9010 


EA EAEAEA 






08 CE 29 90 


EA EAEAEA 






09 


A904 



Buck Rogers 

For Unlimited ships: 
Ctrl KEN All four keys at once 

Tip: stay high and never stop your firing, even 
if the screen is blank, keep firing! 

Bug Attack 
BLOAD BUG ATTACK 
CALL-151 

4901 :x where x=0 of beetles 

8FDG start game 

CannonbaUBUtz 

BLOAD CANNONBALL BLITZ 
CALL -151 
8F76:A0 01 

868C:x where jc=# of guys 

7FDG 

Cannonball Blitz (Alternate) 
BLOAD CANNONBALL BLITZ 
POKE 34444,x where x=» of men 

CALL 4093 starts game 

Canyon Climber 
2600 :x where x=# of men 

2000G (Sam's ver) 

3300:x where jr=# of men 

2000G (87Sctrver) 

Canyon Climber 
BLOAD CANYON CUMBER 
35C2:EA EA 

Celling Zero 
356B:09 
1 ECOG (Short ver) 

Choplifter 
Press Ctrl L then press # of level to go to. 
Color Planetoids 
BLOAD COLOR PLANETOIDS 
CALL-151 

9B7:x where i=# of ships 

803G 

Congo _ " ~ ' 

5227:EA EA EA 
BF4G 

Creepy Corridoors 

into the monitor 
where x=# of guys 



reset 
86A:x 
800G 



Crisis Mountain 

Bonus time does not count down 



13E5:00 

875:00 

1 3C2 :00 Makes you immortal as long as you stay 

away from bats and lava pits 
DCCrx where x=# of men 

C050 C057 select Hires screen 

1 C33G To start game 

Cyclod 
8025:EA EA EA 
900G 

Diamond Mine 
BLOAD DIAMOND MINE or Boot up 

CALL-151 
708E:60 
7FDG 

Diamond Mine 

The passwords to access the lower levels are: 

RKS 

QEZ 

GEM 

WTH 

EME 

FUN 

Dig Dug 
BLOAD DIG DUG or boot up 

CALL-151 
61DB:EA EA 
61DF:EA EA 
1F50G 

Dig Dug (other) 
5BAF:EA EA EA EA EA 

Dig 'Em 
6EAB:FF 
6D87:EA EA EA 
5BD1:EAEAEA 
5808G 

Donkey Kong 
While playing, type " 1 " for more men. If you 
are tired of being killed then type a "2" for an 
invincible Mario! 

Drelbs 
BLOAD DRELBS 
CALL-151 

1CB0:EAEA unlimited men 

1 9A2 :60 60 60 60 60 60 60 60 60 indestructiUe 

Drelb 
COOG 
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Drol 




For unlimited power; 


For unlimited men: 




M S£l 


Byls 


From Iq 


Irk Set Byte 


From 


IQ 


19 OC 


75 


CE1F0B EAEAEA 


OB OA 21 


01 


00 






Milipeed 


11 OA OF 
17 09 B1 


01 
01 


00 
00 


602 A :x 
1F00G 




where x=# 




Dung Beetles 






Miner 2049er 


BLOADDUNGDEETLES 










CALL-151 






reset 






3D3D:53 CC CF 






816:x 
980G 




where *=# of guys 


3D54:CDC2 










BSAVE DUMB BEETLES, A$7FD, L$4000 






Miner 2049'er 




Evolution 




812:x 




where x=leveW 


6731 :x 
6000G 




where x=0 of guys 


814:x 
816:'x 
981 G 




where x=level#-l 
where x=# of men 




Falcons 








Money Munchers 


685B:x 




where x=# of ships 


1020:x 
FE7G 




where x=# of men 




Falcons II 






Montezuma's Revense 


68SB:x 

1. Run game 

2. Request 1 ship 

3. Hit reset 

4. 6040G 


where x=# of ships 


BLOAD MONTEZUMA'S REVENGE 

CALL-151 

63BC:A9 60 

13F0G 



where x=# of men 



Free Fall 
BLOAD FREE FALL, A$800 
CALL-151 
614E:x 
7A5<800.845BM N 7FDG 

Frogger 
70DB:x where x=# of frogs 

7FDG 

Galaxian 
BLOAD APPLE GALAXIAN 
CALL-151 

A83:x where x=# of men 

7FDG 

4886:01 to set score for bonus ship 

4800G 

Gobbler 
BLOAD GOBBLER 
CALL-151 
6046:x where x-§ of gobblers 

Gold Rush 
BE3:x where x=§ of guys 

BOOG 

Hard Hat Mack 

Press ctrl-R and then a number (1-3). 
Hard Hat Mack (alternate) 
503:18 60 N 
50A5:EA EA EA N 
82DG 

Hellstorm 
6F25:x where x- leveW 

6F4A:x - where x=it of ships 

Horizon V 

5B0A:E6 (Unlim) 

Jawbreaker H 

84B :x where x=# of guys 

800G 

Jump Jet 
131D:EAEAEA 

Joust (Atarisoft) 
BLOAD JOUST 61 sector file 

CALL-151 

FFDG : _ run 2,nd'pr^gram 

B7C3:X where x=number of men 

B7AA:00 go through rocks 

3E00G starts game 

Jouster 
BLOAD JOUSTER 
CALL-151 
219E:09 
CTRL-C 
BSAVE JOUSTER.9, A$800, L$75FF 

Jouster (alternate) 
955 :EA EA EA 

Kameari 
BLOAD PUCK1 
BLOAD PUCK2 

B82:EA EA unlimited guys 

952:EAEA weird effects 

Kameari 
BLOAD PACK.DATA1 
BLOAD PACK.DATA2 
B82:EA EA 
7FDG 
95C:EAEA 
7FDG 

Labyrinth 
Press (at the same time) esc K A Y and then 
press 1-8 to go to that level or 9 for ships. 

Mars Cars 
BLOAD MARS CARS 
CALL-151 

7024:x where x=# of cars 

3FDG 



Marauder 

Ids Sfii fi^ £im Ifi 

01 03 46 03 00 



reset 
CALL-151 
8146:00 
8100G 

For unlimited men: 



For less "baddies" 

Microwave 

after the logo comes up. 



IlJS Sfil Byls 
00 OD 3E 
19 OA 3E 



From 

CEBDOB 

CEBDOB 



For less monsters 



la 

EAEAEA 
EAEAEA 



Mouskattack 
6A53:EA EA EA 

Mr. Robot and the Robot Factory 
BLOAD MR. ROBOT 
80A3:59 FF 
76DG 

7685:x where x=# of robots 

7600G 

Neptune 
BLOAD NEPTUNE 
CALL-151 
8290:x where x-tt of ships 

Night Crawler 
BLOAD NIGHT CRAWLERS 
CALL-151 

340 A :x where x=lt of ships 

3300G start game 

Nlghtcrawler 

340A:x where x=# of ships 

3300G 

Nightmare Gallery 
6818:EA EA EA 
8718:EA EA EA 
671B:EAEAEA 
861B:EAEAEA 

Nomads 
41E9:EA EA EA 
26FAG 

Outpost 
2C22 & 8046:# 
3798:EA EA 

Phaser Fire 
BLOAD PHASER FIRE 
CALL-151 
366A:EA EA EA 
3FFDG 

Phaser Fire (alternate) 

4S2E:x where x=# of ships 

3FFDG 

Pooyan 
BLOAD POOYAN or Boot up 

CALL-151 

60ED:x where x=if of men 

7FDG 

Quadrant 6112 

980 :X where x=# of ships 

Quest For Tires 
Ctrl reset 

7A11:X where x=# of wheels 

7A03G to restart game 

Raiders of the Lost Ring 
reset 

685 A :x where x=# of ships 

803G 

Randamn 

These are the four Magical Incantations used 
in Randamn to allow you to bypass certain levels. 

TOMB 
DROWN 
OOZE 
RISK 

Raster Blaster 
692E:EA EA EA EA EA 
2700G 

Rearguard 
ctrl-T + LEVEL # 

Repton 
BLOAD REPTON 
BLOAD MAIN REPTON, A$3000 
21B6:EAEA 

21 C9 : EA EA unlimited ships 

1592:EAEA unlimited nukes 

Repton (alternate) 
19C4:4CCB19N 
19D7:60 N D92:EA EA 

Ribbit 
BLOAD RIBBIT 

70DB :x where x=0 of frogs 

7FDG 

or 
6000G 

Robotron:2084 
BLOAD ROBOTRON 
CALL-151 
53D0:EA EA 18 N 2DFDG 

This makes you invincible! 



Sea Dragon 
8C32:00 (air) 

8C59:00 

8C72:EA EA (damage) 

5C43G 

Seafox 
BLOAD SEAFOX 
CALL-151 

69D9 :x where x=M of subs 

7FDG 

Sea Fox (alternate) 
BLOAD SEA FOX, A$800 

6A34 :x where x=§ of ships 

7A5<800.8960M N 800G 

Serpentine 
BLOAD SERPENTINE 
CALL-151 

81A:X where x=# of serpents 

7FDG 

Sneakers 
BLOAD SNEAKERS 
CALL-151 

6EBB:x where x=# of ships 

C050 C055 turn on Hires screen 

329G start game 

Snack Attack 
5B28:# 
6FDG 



Teleport 



505C:EA EA EA 
89CB:x 
522B:x 
5231 :x 
800G 

reset 

41D1:EAEAEA 

5F8CG 

Thief 
BLOAD THIEF 
4873:EA EA EA EA EA 

Threshold 
BLOAD THRESHOLD 

Unlimited ships: 
CALL-151 
45B0:EA EA EA 
7ECD:EA EA EA 

No laser overheat: 
7666:4C 7D 76 

Unlimited fuel: 
7623:EA EA EA 
7839:EA EA EA 
6 BOOG 

Thunderbombs 
2E39:EA EA EA 



For no ghosts 

where x=# of ghosts 

where x= leveW 

where x=# of men 

start game 



start game 



Tubeway 



Snake Byte 

or BLOAD game 

where x=tt of snakes — OR — 

where x=# of snakes 

where x = starting level 

where x=# of apples to eat per level 
no 



reset 

16AE:x 

726E:x 

7265:x 

76BD:x 

77EAG —OR— esc-R 

250G 

Snake Byte (alternate) 

725E:x where x=# of snakes 

or 
16AE:x 
7265:LEVEL 
77EAG 



BLOAD TUBEWAY 
CALL-151 
22D5:x 
or 
2083:EA EA 
900 or 7FD or 



where x=# of ships 



Tubeway (other) 



Ultima ni 



Snapper 
For more snappers: 
BLOAD SNAPPER 
CALL-151 



851 :x 
7FDG 



The Magic Word is Evocare or Evocate 
To gain access to Exodux castle, go into the 
dungeon to the south east of your home castle. On 
where x=# of snakes ^^e eighth level of the dungeon you will find the 
Mark of the Snake. Force all of your men to touch 
this. Then bring your boat in front of the Silver 
Snake and yell "Evocare". You will then be 
transported to a secret castle. Letting your boat 
get sucked into the whirlpool can be beneficial. 

Viper 
CCD:CO 
7FDG 



where x=# of snappers 



Snoogle 
Press Ctrl-shift -M when you are a pie falling 
apart. Scoring is as follows: 

CHERRY 100 STRAWBERRY 300 

ORANGE 500 APPLE 700 

PLUM 1000 BELL 2000 

GOLDKEY 3000 KING CROWN 5000 

Space Cadets 
BLOAD SPACE KADET 
CALL-151 

5DDE:x where x=# of guys 

7FDG 

Space Quarks 
BLOAD SPACE QUARKS 
CALL-151 

3C54:x where x=# of ships 

BDFG starts game 

Spy's Demise 
60AB:x where x=# of spys 

3FF1Gor 
C050C057C054 
1100G 

Star Maze 
50B2:EAEA 

Starmaze (alternate) 
459C:x where x=# of ships 

Star Thief 
1827:x where x=# of ships 

Star Trek 
BLOAD STAR TREK 
CALL-151 
FED:60 
7FDG 

Succesion 
BLOAD SUCCESION 
CALL-151 

6B71 :x where x=# of guys 

6000G 

Super Puckman 
147B:04 
1C40:60 
800G 

Swashbuckler 
BLOAD SWASHBUCKLER 
CALL-151 
AEO:x 
1800G 



Wargle 
BLOAD WARGLE.OBJ 
7250:x where jc=# of guys 

Wizardry 

When you go to the Adventurers Inn, get your 
character, and before you say what room to put it 
in, insert a blank formatted diskette in drive 1. 
Each time you sleep in the inn, you gain a level! 

If you have a Bishop in your party, simply 
type 'I' to inspect something. But type 9 instead 
of the usual 1-8. Try it a few times and when it 
says "SUCCESS!", your Bishop will have 
100,000,000 experience points! 




/DC 

Inn 



DDDDDDDaaODDDaa 

aDDnnDODDDDDnncz;] 

aDDDDDDDDaDDDDDD 

mni ihhe: 






where x=# of pirates 
start game 



where x=# of ships 



Syzygy 
BLOAD SYZYGY 
CALL-151 
2954 :x 
800G 

Taxman 

Note: this does not work on taxman 11 
BLOAD TAXMAN 

POKE 21 041 ,x where x=# of men 

POKE 20572,234 
POKE 20573,234 

POKE 20574,234 for no ghosts 

CALL 2048 to start game 

Taxman (alternate) 
BLOAD TAXMAN 
CALL-151 



S BBS RDEX 



Nancy Jentzsch 

Softkey for... 

World Geograph vl.l 
MECC 

The 'crack' for World Geograph vl.O also 
works for vl.l, with a slight change in the loca- 
tion of the protection and a change in the ad- 
dresses that are called. Thanks to Brian Troha for 
the original. I followed his logic and found the 
protection on the same track and from there could 
use his changes to make vl.l work! 

1 . Make a copy of each of the two disks with any 
whole disk copier. 

2. Edit the program disk copy. 



Blk 


Byte 


From 


To 


9 


$173 


20 3E0B 


AD3E0B 




$176 


9005 


80 03 




$178 


2046 0A 


AD 46 OA 




$173 


BO 23 


EA 18 



3. Write the block back to the copy 
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Blocks vs Tracks 

ProDOS & DOS sector correspondence 

This is in response to Ken Ball's query in 
Computist #69 as to how blocks relate to the 
sectors that most programs still use, such as Copy 
nPlus. 

First of all, let's get it straight here. There is no 
difference in the physical format of a EKDS 3.3 
disk and a ProDOS disk. Check it yourself. Get a 
DOS 3.3 disk and a ProDOS disk, and then get 
into your favorite nibble editor. The ProDOS 
disk still has $23 tracks, each track containing 1 6 
sectors, and the address/data headers and epi- 
logues are still the same (unless you are looking 
at a protected disk!). 

Thus, a sector editor SHOULD be able to read 
a ProEXDS disk, since it has the same marks in the 
address field as a normal DOS 3.3 disk. 

So, you ask.. "What's the difference between 
PioIX)S and DOS 3.3 then?".. Go ahead ask it! 
The difference lies in the 'RWTS' which is 
loaded after you bootyourdisk..Iput 'RWTS' in 
quotes, because under ProDOS, it is usually 
referred to as the ProDOS MLI, or machine 
language interface. Almost all disk access is 
ported through this little beauty. It make pro- 
graming in assembly language soooo much eas- 
ier, believe me! 

No w, the ProDOS file/disk system is not built 
around the sector, as DOS 3.3 was, rather it is 
built around the block. 1 block = 2 sectors. But, 
not 2 consecutive sectors. This is where the 
difference enters. The authors of ProDOS found 
a way to minimize the writing time of the data to 
the disk, without losing data by trying to be too 
quick. Because ProDOS needs time in between 
each block it writes to do some internal 'house- 
cleaning', it skips 1 sector each time it writes 1 
sector (= 1/2 a block). This is a sufficient time for 
the apple to 'recover' and proceed with the write 
operation. 

If we took one track out, and stretched it out 
imtil it was 'straight', it would look like table 1. 

Thus, block $0000 is written at track $00, 
physical sectors $00 and S02. Notice how the 
blocks 'wrap around'. This is one of the ideas 
which make ProDOS up to 8 times faster than 
DOS 3.3. 

But, these 'sectors' are physical sectors, and 
not the sectors which are read when you use a 
sector editor, such as Copy II plus. The sectors 
used there are standard DOS 3.3 sectors, and 
these are the sectors which mostof us are familiar 
with. 

To read block $0000, you would have to read 
sectors $00 and $0E with your favorite sector 
editor. 

Table 2 shows you what track and sectors a 
block resides on a 5 1/4" disk. 

Say, you want to look at block $0OE9. So, you 
find it in the table, and see ^at it is located on 
track $1D, sectors D&C. So, break out Copy 11 
Plus, and hack away. I hope that this has an- 
swered your question sufficiently. Maybe cut out 
this table and stick on the wall next to your 
computer or something. Better yet, ditto the page 
FIRST, and then cut it out and put it up! 



Brian A. Troha 



Softkey for... 

Ancient Land of Ys 
Broderbund 

Requirements: 

512KApplengs 
3.5" disk copier 
3.5" disk editor 

Ancient Land of Ys ( ALY) from Broderbund 
is an advenmre role playing game. You control a 
little guy and run around completing various 
quests in an effort to regain the six books of Ys. 
The game comes on two disks, the /PROGRAM 
disk and the /DATA disk. The file YSBOOT 
.SYS 16 on /PROGRAM checks for enough 
memory then runs the program YSGS on/DATA. 
This information was useful when itcame time to 
search for the copy protection. 

The overall game is nice with good graphics 
and sound, however, ALY has two problems. 
The first problem is ALY is copy ps-otected and 
the other is it is NOT hard disk compatible. The 
reason I'm writing this article is I have been 
successful in over coming both of these prob- 
lems. Firstlets start by removing thecopy protec- 
tion. Broderbund has been known to use the 
standard nibble counting routine on tracks $20 & 
$21 on a few programs (Showoff, Geometry, 
Where in the World is Carmen Sandiego). So I 
began by searching for the key string (I have 
mentioned in so many articles) of A2 20 AO 01. 
I found the following routine on block $4A6 of 
the /DATA disk. 
07:A900 00 



0A:8DCA65 



0D:8DC6 65 STA 65C6 
10:8DC8 65 STA 65C8 



13:E2 30 

15:A2 20 
17:A001 
19:204E65 
1C:B013 



SEP #$30 

LDX #$20 

LDY #$01 

JSR 654E 



1E.8EC665 STX 65C6 



21:8CC765 STY 65C7 



24:A2 21 
26:A001 
28:204665 
2B:8EC865 



2E:8CC9 65 STY 65C9 



31:C230 



33:90 X 



LDA #$0000 Load a zero 

STA 85CA Zero out nibble count 
read error flag 
Zero out nibble count 
sum for track $20 
Zero out nibble count 
sum for track $21 
Use8bltwldeAccum 
and Index regs 
Load track $20 
Load side 
Go to nibble count 

BCS 31 (+13) Carry set Is read enur or 
wrong disk 
Store lo-byte sum for 
track $20 

Store hl-byte sum for 
track $20 
Load track $21 
Load side 
Go to nibble count 
Store lo-byte sum for 
track $21 

Store hl-byte sum for 
track $21 

Set16bJtwldeAccum 
and Index regs 

BCC 41 (+00) Carry dear was a good 



LDX #$21 
LDY #$01 
JSR 654E 
STX 65C8 



REP #$30 



35:ADCA65 LDA 65CA Read errors or wrong 

disk come here 
38:49 FFFF EOR #$FFF 
3B:1A INC 

X:A2FFFF LDX #$FFFF Load bad values 
3F:80 06 BRA 47 (+06) Branch fo the RTS 



block 

Physical 
DOS3.3 



Table 1 

blocks/physical sectors/DOS 33 sectors 

0415152626 








2 3 4 
E 6 D 



6 
C 



8 
B 



9 A 
3 A 



B 

2 



C D E F 
9 1 8 F 











Ta^hZ 
















Physical Sector #'s 








Trk 


0&2 


4&6 


8&A 


C&E 


1&3 


5&7 


9&B 


D&F 


$00 


$0000 


$0001 


$0002 


$0003 


$0004 


$0005 


$0006 


$0007 


$01 


$0008 


$0009 


$000A 


$00OB 


$000C 


$000D 


$000E 


$00OF 


$02 


$0010 


$0011 


$0012 


$0013 


$0014 


$0015 


$0016 


$0017 


$03 


$0018 


$0019 


$001A 


$001B 


$001C 


$001D 


$001 E 


$001 F 


$04 


$0020 


$0021 


$0022 


$0023 


$0024 


$0025 


$0026 


$0027 


$05 


$0028 


$0029 


$002A 


$002B 


$002C 


$002D 


$002E 


$002F 


$06 


$0030 


$0031 


$0032 


$0033 


$0034 


$0035 


$0036 


$0037 


$07 


$0038 


$0039 


$003A 


$003B 


$003C 


$003D 


$003E 


$003F 


$08 


$0040 


$0041 


$0042 


$0043 


$0044 


$0045 


$0046 


$0047 


$09 


$0048 


$0049 


$004A 


$004B 


$004C 


$004D 


$004E 


$004F 


$0A 


$0050 


$0051 


$0052 


$0053 


$0054 


$0055 


$0056 


$0057 


$0B 


$0058 


$0059 


$005A 


$005B 


$005C 


$005D 


$005E 


$005F 


$0C 


$0060 


$0061 


$0062 


$0063 


$0064 


$0065 


$0066 


$0067 


$0D 


$0068 


$0069 


$006A 


$006B 


$006C 


$006D 


$006E 


$006F 


$0E 


$0070 


$0071 


$0072 


$0073 


$0074 


$0075 


$0076 


$0077 


$0F 


$0078 


$0079 


$007A 


$007B 


S007C 


$007D 


$007E 


$007F 


$10 


$0080 


$0081 


$0082 


$0083 


$0084 


$0085 


$0086 


$0087 


$11 


$0088 


$0089 


$008A 


$008B 


$008C 


$008D 


$008E 


$008F 


$12 


$0090 


$0091 


$0092 


$0093 


$0094 


$0095 


$0096 


$0097 


$13 


$0098 


$0099 


$009A 


$009B 


$009C 


$009D 


$009E 


$009F 


$14 


$00A0 


$00A1 


$0OA2 


$00 A3 


$00A4 


$00A5 


$00A6 


$00A7 


$15 


$00A8 


$00A9 


$0OAA 


SOOAB 


$OOAC 


$00AD 


$00AE 


$00AF 


$16 


$00B0 


$00B1 


$0OB2 


$00B3 


$00B4 


$00B5 


$00B6 


$00B7 


$17 


$00B8 


$00B9 


$00BA 


$00BB 


$00BC 


$0OBD 


$OOBE 


$OOBF 


$18 


$0OCO 


$00C1 


$00C2 


$00C3 


$00C4 


$00C5 


$00C6 


$0OC7 


$19 


$00C8 


$0OC9 


SOOCA 


SOOCB 


$0OCC 


$OOCD 


SOOCE 


$0OCF 


$1A 


$00D0 


$OOD1 


$00D2 


$00D3 


S00D4 


$00D5 


$00D6 


$00D7 


$1B 


$00D8 


$0OD9 


$0ODA 


$00DB 


$00DC 


$OODD 


$OODE 


$0ODF 


$1C 


$00E0 


$00E1 


$00E2 


$00E3 


$00E4 


$00E5 


$00E6 


$00E7 


$1D 


$00E8 


$0OE9 


$00EA 


$00EB 


$00EC 


$OOED 


$0OEE 


$00EF 


$1E 


$0OFO 


$00F1 


$00F2 


S0OF3 


$00F4 


$00F5 


$00F6 


$00F7 


$1F 


$0OF8 


$00F9 


$00FA 


$0OFB 


SOOFC 


SOOFD 


SOOFE 


$00FF 


$20 


$0100 


$0101 


$0102 


$0103 


$0104 


$0105 


$mo6 


$0107 


$21 


$0108 


$0109 


SOIOA 


$010B 


SOIOC 


$010D 


$010E 


$010F 


$22 


$0110 


$oiii 


$0112 


$0113 


$0114 


$0115 


$0116 


$0117 


Trk 


O&E 


D&C 


B&A 


9&8 


7&6 


5&4 


3&2 


l&F 








DOS 3.3 Sector #'s 









41:A9C6 65 


LDA #$65C6 lo-word pointer to sums 


0F4:49 00 80 


EOR #$8000 


44:A2 00 00 


LDX #$0000 hi-word pointer to sums 


0F7:30 23 


BMI 110 (+23) 


47:60 


RTS 




Return to sender 


0F9:A5 D8 


LDA D8 Load track $21 sum 


48:5A 


PHY 




Push side 


0FB:38 


SEC The hard way to 


49:DA 


PHX 




Push track 


0FC:E9AF1D 


SBC #1DAF compare the sum 


4A:F4 00 00 


PEA 


0000 




0FF:F01B 


BEQ lie (+16) it shouki be higher 


4D:F4 6765 


PEA 


6567 


Push pointer to disk/ 




thelDAF 








volume name 


101:7003 


BVS 106 (+03) but less then 1E79 


50:22 AO 66 00 


JSL 


0066AO Count them up 


103:49 00 80 


EOR #$8000 again, all branches to 


54:8DCA65 


STA 


65CA 


Temp store for Accum 




110 are failures 


57:68 


PLA 






106:1014 


BPL 110 (+14) 


58:68 


PLA 






108:A5 D8 


LDA D8 


59:68 


PLA 






10A:38 


SEC 


5A:68 


PLA 






10B:E9 791E 


SBC #$1E79 


5B:68 


PLA 






10E:7003 


eVS 113 (+03) 


5C:68 


PLA 




Pull all pushed values of 


110:490080 


EOR #$8000 








the stack 


1133007 


BPL 110 (+07) 


5D:ADCA65 


LDA 


65CA 


Reload Accum (read/ 


115:A9 0100 


LDA #$0001 Load a non-zero value 








wrong disk flag) 


118:85 EO 


STA EO Store In "benchmark" 


60:60 


RTS 




Return 




flag so BEQ is NOT 


61:50524F4752414D 




6567 -PROGRAM; disk/ 




taken 








volume name 


11A:800A 


BRA 126 (+0A) Branch to branch 


That was 


the routine to do the nibble count- 




long 


ing. After tracing the program code back a couple 
of times I ended up with the following code on 


11C:A2FFFF 
11F:A9FFF 


LDX #$FFFF 

LDA #$FFFF Load failing values 


block $3BF on the /DATA disk: 


122:68 D2 


STX D2 










124:85 00 


STA DO Store them 


059flB 


PHD 






126:82 45 FF 


BRL 06E(-00BB) Branch long to 


05A:3B 


TSC 








the top and start over 


056:38 


SEC 






129:F4 00 00 


PEA 0000 Continue code for the 



05C:E9FB00 
05F:5B 
060«9CE00 
063:1 B 
06422 6F 65 00 

068:86 02 

06A:85 DO 

060:64 EO 

06E:A5EO 
070:F003 



072:82 64 00 
075:38 
076A5D0 
078.E90000 
07B:D007 
07D:A5D2 
07F:E9 00 00 
082:80 07 
084:ASD2 
086:E9 00 00 
089:02 02 
086:7003 
080:49 0080 
0903022 
092:F4 01 00 
095:F4 6000 
098:F41000 
09B:F4 0000 
09E:F4B002 
0A122B70D00 

0A5;7A 
0A6:7A 
0A7:7A 
0A8:7A 
0A9:7A 
0AA:226F6500 

0AE:86D2 
060:85 00 
062:8001 
064:A6D2 
066:ASO0 

068:86 DE 

0BA:8SDO 

0BC:A6DE 

0BE:A5DC 

0CO:DA 

001:48 

002:18 

003:690200 

0C6:85DO 

0O8:A5DE 

0CA:9001 

000:1 A 

0OD:85DE 

0CF«8 
ODO:FA 
0D1:85F6 
0D3:86F8 



SBC #OOFB 

TOD 

ADC #00OE 

TOS 

JSL 00656F 

STX D2 

STA DO 

STZ EO 



Goto the nibble count 

routine above 

Store hl-word of pointer 

to sum values 

Store lo-word of pointer 

to sum values 

Clear a "benchmark" 



LDA EA Load flag 

BEQ 075 (+03) If It's zero then 

branch to benchmark 

tests 
BRL 129 (+0064) Branch long to 
SEC continue code 

LDA DO 
SBC #0000 
BNE 084 (+07) 
LDA D2 
sec #0000 
6RA 086 (+07) 
LDA D2 
S60 #0000 
REP #$02 
6VS 090 (+03) 
EOR #$8000 

BMI 064 (+22) 6ranch to compare 
PEA 0001 sums 
PEA 0060 
0010 

Push info on slack for 

call 
000DB7 Insert /PROGRAM disk 

routine 



PEA 
PEA 0000 
PEA 0260 
JSL 



PLY 
PLY 
PLY 
PLY 
PLY 
JSL 



Pull all pushed Info off 
the stack 
00656F Goto nibble count 
routine 



STX D2 
STA DO 
BRA 0751 
LDX D2 
LDA DO 



Store the pointer again 
'3F)6tanch back up 



DO & D2 point to track 
$20 sum 
Transfer sum 
toDE&DC 



STX DE 

STA DO 

LDX DE 

LDA DO 

PHX 

PHA Push on stack 

OLC 

ADO #$0002 Add 2 to track $21 sum 

STA DC 

LDA DE 

BCC0OD(+01) IfDOwasFFFEor 
FFF carry set 

INC Then Increment the hl- 

word 

STA DE DE& DC now hold 
pointer to track $21 

PLA 

PLX 

STA 

STX 



F6 
F8 



0D5:A7F6 LDA [F6] 



0D7:85DA 

0D9:A7 DO 

006:85 D8 

0DD:A5 DA 
0DF38 
0E0:E9 66 20 

0E3:F0 37 

0E5:70 03 
0E7:49 00 80 

OEA:10 30 
0EC:A5 DA 
0EE:38 
0EF:E9 03 21 
0F2:70 03 



STA DA 



LDA [DC] 



STA D8 



DA 



Pull pointer off stack 

F6 & F8 now hold track 

$20 sum 

Load indirect long track 

$20 sum 

Store track $20 sum in 

DA 

Load indirect long track 

$21 sum 

Store track $21 sum In 

D8 

Load track $20 sum 



LDA 
SEC 
sec #$2066 The hard way to 

compare the sum 
6EQ 110 (+37) it should be higher 

* then 206B 
BVS 0EA{+03) but less then 2103 
EOR #$8000 all branches to 1 10 are 

failures 
BPL lie (+30) 
LDA DA 
SEC 

SBC #$2103 
BVS 0F7(+03) 



program 

The above section of code is the deciding 
factor in the copy protection routine. The first 
JSL 00656F must be disabled by changing the 22 
to an AF. Then we come to the STZ EO and the 
LDA EO, well EO will equal one on a passing 
copy so I changed the LDA EO to INC EO. Now 
we zero out EO and then increment EO to get the 
value of one. The final step is to disable the BEQ 
+•3 and that is done by over writing it with two 
NOPs. The resulting copy is now deprotected 
and will run just fine from two 3.5 " disk. The step 
by step would be: 

1 . Make a copy of both disks. 

2. Make the following edits to the /DATA disk: 

Blk Bvte From lo 

$3BF $64 22 6F 65 00 AF6F65 00 

S6E 85E0F003 E6E0EAEA 

3. Write the block back to the copy. 

Hardkey for... 

Ancient Land of Ys 

Broderbund 

ALY is now deprotected but it'snothard disk 
compatible, yet After some work I was able to 
come up with a scheme of edits that fixes this 
problem. The fix includes editing two system 
files and renaming two files on different disks. 
Also the end product will require about 935 K of 
disk space and will no longer be RUN-ablfe'fi'Wn 
3.5" disks. 

At this point I suggest you first make TWO 
sets of deprotected backups. Label one set An- 
cient Land of Ys. The other set we will use for the 
hardkey. You should now already have depro- 
tected flie program via the edits listed earlier. The 
following steps are done using the /PROGRAM 
disk,Block Warden users [F]ollow /PROGRAM/ 
YSBOOT.SYS16 

Fixing tlie program 

1 . With a block editor make the following changes 
(With Block Warden's "Follow" command 
use rel block 1, rel byte $98): 

Blk Bvte From I2 

$1C7 $98 DA 2F 44 41 09 31 2F 59 

54 41 2F 59 53 2E 47 41 

534753 4D4500 

That changes "/DATA/YSGS" to "1/ 
YS.G AME". Note: Make sure to change the final 
"S" (53) to 00 in hex. 

2. Rename YSBOOT.SYS16 to LAND.OF.YS 

Now it's time to work with the /DATA disk. 
(For Block Warden, [FJollow /DATA/YSGS) 

1 . Change from /program (2F 70 72 6F 79 6C 65 
6Dinhex) to l/ys.dat(31 2F7973 2E64 61 79 
in hex) at all the following locations: 



Block 


Bvte 


EsLBlk 


R^lByte 


$57C 


$D2 


452 


$386D2 




$E9 




$386E9 




$101 




$38701 




$11C 




$3871C 




$138 




$38738 




$157 




$38757 




$173 




$38773 




$190 




$38790 




$1A7 




$387A7 




$1C0 




$387C0 




$1DB 




$387DB 




$1F4 




$387F4 


$57D 


$0E 


453 


$3880E 




$28 




$38828 




$3F 




$3883F 




$5C 




$3885C 




$77 




$38877 




$93 




$38893 




$AF 




$388AF 




$CA 




$388CA 




$11A 




$3891A(in upper case) 


$598 


$98 


480 


$3BE98 



COMf?UBSTv#73 



.SP^Se'^.DgR^.xcli^Pfte 



2. Change from /DATA/YSDATA (2F 44 41 54 
41 2F 59 53 4441 54 41 in hex) to 1/YS.DAT/ 
LOY(312F5943 2E444154 2F4C4F59in 
hex) at all the follow locations: 

Block Byte Rel Blk Rel Bvte 

$582 $15B 458 $39358 

$19A $3939A 

$584 $83 460 $39683 



It, 



3. Change from /DATA/ (2F 44 41 54 41 2F in 
hex) to 1/ (3 12F 00 00 00 00 in hex) at Block 
$582, Byte $193, Rel BLK 458, Rel Byte 
$39393 

4. Rename YSGS to YS.GAME 

5. Rename YSDATA to LOY 

Uploading to a Harddrive 

Now it's time to upload the whole game to 
your hard drive. Create a new folder/subdirec- 
tory called LAND.YS or what ever you like. 

1 . Copy LAND.OF. YS from /PROGRAM to the 
LAND.YS folder 

2. Create a new folder called YS.DAT in 
LAND.YS folder 

3. Copy the TITLE & FGRAPH folders from / 
PROGRAM in to the YS.DAT folder 

4. Copy YS.GAME from /DATA to the 
LAND.YS folder 

5. Copy the LOY folder from /DATA into the 
YS.DAT folder 

A tree directory of the main files would look 
like this: 

File name T yp e 



LAND.CF.YS 
YS.GAME 
/YS.DAT 
/TITLE 
/FGRAPH 
/LOY 
/MAPS 

/SHAPES. ART 
/GCH.ART 
/MUSIC 
TEXTDAT.HUF 
PEOPDAT.HUF 



S16 
EXE 
DIR 
DIR 
DIR 
DIR 
DIR 
DIR 
DIR 
DIR 
$00 
BIN 



To run Ancient Land of Ys simply run/launch 
the LAND.OF. YS file. I did not change the user 
diskname so you will stillneed a separate disk for 
your character information called /USER (read 
the flier on creating a game save disk). If you 
wanted to, you could search YSGS (YS.GAME 
after you haverenamed it) for /USER and change 
it to 1/CHR. Then you would have to create a new 
folder in the same subdirectory as LAND.OF. YS 
called CHR and copy any needed files to it. All 
information will be stored in the folder called 
CHR on your hard disk instead of the separate 
disk. 

If you didn't make any errors in the editing of 
the ^e names you should have a hard disk 
compatible version of ALY. At this point I would 
(after you have upload the files to the hard drive) 
get out two more disk and format them. Call the 
disks Ancient Land of Ys HD 1 and 2 and copy 
the files LAND.OF. YS and YS.GAME to disk 
one and the folder YS .DAT to disk two. This way 
should loose you hard drive («7ash> and have to 
reformat you will not have to go though and re- ' 
edit AitKitent Laftd Of Ys. 

Softkey for... 

Tunnels of Armageddon 
Logical Design Works/California Drettms 

Requirements: 

5l2KApplengs 
3.5" disk copier 
3.5" disk editor 

Tunnels of Armageddon (TOA) is fast paced 
arcade type game that has you screaming down 
tunnels avoiding walls and trying to shoot enemy 
ships. Like the other five releases from LDW 
TOA is using a KEYWORD (pirate) protection 
in the form of a color code wheel. The requestor 
screen comes up and tells you to line up two 
colors and then asks for a color at a certain 
number. As I hate this type of copy protection I 
set out to disable it. 

On a tip from Jason Harper (and after digging 
around in the CP code) if you type kacper (lower 
case only) the CP is bypassed and a cheat mode 
enabled that will allow you to continue after 
running out of time. However, running out of 
energy or structural damage will still kill you. 
Anyway I have come up with a patch that will 
allow you use this built in cheat or click on any 
color and still play the game. To do this, the CP 
routine must still be run but I modified the return 
code to return with a "correct answer" value. For 
those of you who are willing to give up the cheat 
and would rather not ever see the CP screen I 
have added a second set of patches to get around 
that to! 

1 . Make a copy of the game disk. 

2. Make the following edits to the copy only: 



M 


Byte 


From 


Is. 


$3B 


$96 


PC 05 A9 00 


EA EA EA EA 






00 8003 


EAEAEA 



3. Write the block back to the copy 

To totally skip the CP screen and forfeit the 
built in cheat ADD the following: 

Blk Byte From To 

$39 $FC A2 04 91 A2 04 90 

$10C A9 0100 82 4E03 

$3B $1D0 B7D4 97D0 88 EAEA EAEAEA 

88 10 F8 A7 D4 EA EA EA EA EA 

87 DO EA EA 

$3C $C1 BO 03 A9 00 00 EA 18 82 48 02 

To upload the program to your hard drive just 
copy all files into any folder/subdirectory except 
PRODOS and SYSTEM. Enjoy thenewly depro- 
tected version of Tunnels of Armageddbn. 



B Subscribers Only 

Note #2 
Date: 3 Mar 90 (07:08) 

To: ALL 
From: User #269 
Subj: DUNGEON MASTER 

©In Computist #70page 12 : Softkey for ... 
DM (by Bob Thanski) Softkey gave a way to 
backup our original DM disk, I could not get it to 
work properly. The game did not crash, but I 
could not open doors. It acted like a demo disk. I 
may have a different version? Did anyone else 
have problems or did it work satisfactory? 

1) Perform a sector copy of the disk 

2) Perform the patches indicated inlssue #70. 
3)DoaBrrC0PY,SYNC,KEEPtracklength. 

(using Copy 11+ Farm 4C set to 0) of Block 1 Side 
2 (the orte thai shows an error during step 1 
above). 

This will (should) yield a playable copy 
however, any attempt at diskaccesswill eject the 
disk & say "INSERT DUNGEON MASTER 
DISK" which means that you can't save the 
game. ..WellBob,yawanna give it another go.or 
do you have a different version? <sysop> 

Note #3 

Date: 8 Mar 90 (20:29) 

To: ALL 
From: User #1082 
Subj: Cracks 

® Does anyone have a crack for Toy Shop or 
Bureaucracy? I have the originals that I'll lend to 
someone that may be able to do it. 

Note #4 (Reply to #3) 
Date: 11 Mar 90 (01:37) 
From: Sysop 
Subj: Cracks 

Toy Shop: Issue #62. pg. 29 
Bureaucracy: Issue #48, pg 33 

If these don't work or you don't have (can't 
get) the issues, I do backups for the local Apple 
user group (NorthWest Apple Pickers) & Com- 
putist. I usually charge $2 per program (or $ 1 per 
disk whichever is greater) plus $2 shipping & 
handling (Add SI per disk if I supply the blank 
disks for the copies.) I also include the copy 
protection method used with the copied disks so 
that if capable (or inclined) you can make added 
backups yourself. If I can' t make a good working 
copy, there is no charge & the disks and money 
are refunded together. 

If you decide to have me do them, send 
original disk(s) (I will not attempt to make woilc- 
ing copies from any disk that is not an original) 
to: 

Gopher-Tech Electronics (or Computist BBS) 
w c/o David Gofoith . ^ 
. 11015 Old MiUtaryRdSW 

Tacoma,WA 98498-1524 

Include a short letter of what you'd like 
(multiple copies, allow for hard disk installation, 
5.25 -> 3.5 transfer, single working copy, depro- 
tection, etc.) and also a phone # that I can c^l if 
necessary. If you'd like to contact me in person, 
leave E-Mail. 

Note: Ensure you state that you are a Com- 
putist subscriber. This gives you the above prices 
(which are a 50% discount). 

Note #8 (Reply to #3) 

Date: 23 Mar 90 (21:15) 
From: User #1054 
Subj: Cracks 

I just recently purchased Bureaucracy at the 
AM Computer Swap at Kent commons on March 
17th. Well I looked for a possible crack in all of 
my Computist magazines and didn't find one. 
One thing I must say is that I am a new program- 
mer, etc. My copy of Bureaucracy is labeled as 
Apple n (16-sector disk) -side 1. Other side is 
side 2. Side one can be copied with any copier (I 
used Locksmith 5.0 Fast Copy) but side two is a 
different story. You can try to copy side two with 
Locksmith 5 .0 Fast copy but when you try to play 
the game it doesn't work. Well what I did was use 
EDD in selected duplicate disk and then selected 
#3 (auto nibble count) it copied the disk with 
errors on tracks 1 F thru 22. The errors according 
to the EDD display was R W R R. 

Further investigation into those tracks really 
didn't show me anything at all, but as I said 
before I am new at this and am doing my best with 
what little I know. One thing I should say is that 
when I used the disk speed option of Locksmith 
5.01 found that the sp>eed of the Inf ocom disk was 
approximately 195.5 to 195.6 . 1 tried to copyy the 
disk using EDD option #1 (normal) with my 
duplicate drive set at 195 .5 and copying only disk 
tracks 00 thru IE but when I played the game I 
went to the bank and the disk whirred and I 
received this message "Internal error 14. End of 
session." So it looks like the program is doing 
something that requires tracks IF thru 22 to be 
there. Just remember side 1 you can copy with 
any copier but it is side 2 that is the jjroblem. I 
sure hojje this helps someone out there. 

Note #9 (Reply to #3) 

Date: 23 Mar 90 (21:20) 
From: User #1054 
Subj: Cracks 

Hi, me again. I did forget to let you know that 
with EDD in using the auto nibble count option 
to copy Bureaucracy that the copy works fantas- 
tic, despite the errors. I have played the game and 
I have found no problems at this time at all. I will 
say that it is a crazy game too!! 



Note #5 
Date: 13 Mar 90 (09:37) 

To: ALL 
From: User #226 
Subj: Toy Shop 

Those two programs are 18 sec tor programs... 
I am not really sure if it was done as a protection 
method or simply to allow more data on the disk. 
Much like 3.2 was 13 sectors and 3.3 was 16 
sectors these could be called 3.4 18 sectors. I 
know of only one person that could do them for 
you. TheSaltine from theoldCOASTTOCOAST 
group. You might try writing to him care of the 
COMPUTIST, they may still have his address. I 
have played with the 1 8 sector EXDS, but have not 
had much success. I can get a conversion of the 
disk ( 2 original sides usually becomes three 
cracked sides). The problem comes in trying to 
rewrite their DOS to read 16 sectors, I know how 
to do it in theory (with a lookup table track 1 
sector 1 7 would translate to track 2 sector 2). But 
one day... and if anybody knows of an IBM 
cracked.. I would be interested in talking to 
them.. I am about to get an IBM and am sure glad 
that computer is covered by the COMPUTIST. 

Note #7 (Reply to #5) 
Date: 23 Mar 90 (20:37) 
From: User #1082 
Subj: Toy Shop 

I didn't know that the Saltine was a COM- 
PUTIST subscriber he's also the one that did 

Where In the USA is Carmen SanDiego.... Fed- 
eration Transformers Release. I can make a bit 
copy of Toy Shop that works.. ..I can't get a copy 
that can be packed with Shrinkit. 

Note #6 

Date: 18 Mar 90 (16:43) 

To: ALL 
From: TOP GUN (User #452) 
Subj: A) CDA Menu, B) Kings Quest IV 

® Some time back, a reader described the 
technique whereby the CDA menu could be 
disabled. This would eliminate using the "Visit 
Monitor" CDA that is part of the ROM 01 Ilgs. 
Does anyone remember what issue that was? Or, 
perhaps, describe the solution? 

©I have Kings Quest IV from Sierra. I have 
it on my hard drive, but you need the manual to 
pirovide the "key word" when the program asks. 
Can anyone give me direction as to how to 
eliminate the protection? There is no readable 
text on the disk. Thanks. 



IL 



John C. Tucker 

I have been a COMPUTIST reader from the 
start. I have every issue that has been published, 
r still keep the back issues for reference as they 
contain the best explanation of Apple techniques 
available. I hopie you can continue to publish 
even though Apple is in disarray with their low 
end product strategy. 

I need some help and I hop>e some COM- 
PUTIST reader will be able to assist. I have a C. 
Itoh Pro writer 8510AP Printer and would like to 
continue using it as the Prowriter has been very 
reliable. I also have a Spies Niceprint interface 
card which gives me letter quality output. The 
Niceprint card emulates the old Grappler Card 
not the Grappler Plus. Parallel Pro drivers also 
seem to work. 

©Does anyone know how to patch the 
Imagewriter Printer driver in GS/OS System 
5.0.2 to work with the Prowriter 8510AP? The 
printer codes are very similar except for bit image 
graphics which is IB 47 for the Imagewriter and 
IB 53 for the Prowriter. Is there a source where 
custom printer drivers for GS/OS may be pur- 
chased or dumped from a bulletin board? Any 
help you can give will be appreciated. 



Brian A Troha 



WI 



I'd like to say some things. First in issue #70, 
page 5 in the editorial: I really cannot see the 
reason for printing the S P A ' s 800 number unless 
you are suggesting that readers call the number 
only to run up their (the SPA's) toll bill. You 
know, just call and say HI! and waste some time 
in talking with the people. I'm sure the informa- 
tion printed in COMPUTIST will in some form 
be used for piracy. This is by NO means the 
publishers (or the people who write deprotection 
articles) fault. Some of your better writers are 
pirates that share their talent and knowledge. I 
see no reason to try to discourage these writers by 
the potential threat of being turned in. 

The commentary on the SPA's toll free 
number was meant to be a joke, laced with 
sarcasm RDEXed 

I remove copy jjrotection and tell others how 
to do it, how people use my information is up to 
each individual. I have a choice, let people know 
how to depjrotect software or not. Sure it has 
caused some piracy, but when I get letters from 
people telUng me ho w nice it is to have programs 
hard drive based. How they save money by 
trashing depwotected copies and NOT the origi- 
nals. How their originals have since failed and 
thanks to the information I have provided they 
can still use the program (deprotected copies that 
is). This makes my choice easy, let the people 
decide what to do themselves. 

To StarBuck: I have written four little depro- 
tection programs and put them up on "on-line" 
services like Comp-u-serve. I put them up as 
shareware to pay for my accounts on those serv- 



ices. I also px>st many kracks. I have been putting 
little COMPUTIST ads at the end of the text file 
posts. This helps spread the word about COM- 
PUTIST on a "national" level. There are many 
people that subscribe to these on-line services 
and they are looking for just such amagazine that 
explains how to remove CP. Anyway, in issue 
#70, you listed the krack for Arkanoid. If you 
(StarBuck) are going to list outmy {n-ograms and 
convert them to block/byte patches the least you 
could do is give me credit for the work. 

To Bob Thanski: Dungeon Master has a very 
complicated CP scheme. They (FTL) do check- 
summing all over and use several fiags in their 
CP. The game must read block 17 correctly after 
changing the smartport hooks to sp>ecial routines. 
Play the game long enough and it will start to 
break down. Things like Fatal error #003C, you 
caimot save games, certain doors will not ope-n, 
things that you throw may just hang in space and 
you cannot pick them up again. There are all 
kinds of little things like this built into the game. 
There is CP code in the game data file and I 'm not 
sure what else. This program will still have to be 
on the most wanted list. 

I have seen letters by people who are having 
problems uploading kracked games to hard disks. 
Part of the reason these problems arise are disk 
based copy protection (bad block checks, nibble 
counts) check the disk name they try to read. So 
if you force the CP to pass at the lowest end, many 
times the disk name will be checked for before 
your patches. The way around this is to totally 
avoid the entire check routine. 

In issue #67, I have patches for California 
Games and Tlie Last Ninja that completely skip 
the CP routines including the check for the name 
of the disk. If you examine the code listed for Last 
Ninja you see the call to ProDOS 16 (the 
GET_DEVICE) checks to see if the program is 
run from the right disk. What the GET_DEVICE 
does is find the disk called "???" (the name in the 
parms) and tell ProEXDS what device the disk is 
"mounted" on. After making my patch that jumps 
over the GET.DEVICE and READ.BLOCK 
code you can upload the game to any subdirec- 
tory without editing any disk names. 

I hoj)e you can see die impwrtance of tracing 
the CP routines back far enough to totally avoid 
going into a routine that reads off the disk or 
checks for a certain disk name to be online. 

Another possible reason for not being able to 
upload kracked programs to hard disk is: Many 
programs have disk/volume names hard coded 
into the file. You see things like "/VOLMUE/ 
GAME". This means find the disk called /VOL- 
UME and run/load the file called GAME. Pro- 
gramers should code it as "1/GAME" meaning 
use die current device and run/load the file called 
GAME. The "1/" ttick is built into ProDOS 16 
and GS/OS so you don't need any special pro- 
gramming skills to write device indep>aident 
programs. With exaniples like Mekn I8;'&tibble ' 
Ghost, and the following on Shanghai you can 
get some ideaof how to fix this kind of ptrogram. 

The last thing I would like to talk about is the . 
direction of copy pnotection as I see it going. 
With the "new" GS and ROM 3 (most tools in 
ROM) you might see more altered formats like 
Alien Mind as most tools no longer need to be 
loaded into memory. This fact along with the 
extra memory gained without having GS/OS 
present (I think about 380K) is a good reason for 
these formats. The only jwohlem is for the users 
with Unidisks and those people with the Laser 
3.5" disks and Universal disk controller who will 
NOT be able to use the program. 

However, due to the dropping prices of SCSI 
Hard disks and the wave of internal hard disks, I 
think you will find more manual/codewheel based 
CP. So far, there's only two games with KEY- 
WORD protection that have NOT been kracked 
by anyone. They are King's Quest 4 and Man- 
Hunter: New York by Sierra. With the additional 
knowledge I have gained since this Vfpe. of CP 
has come out, I am able to defeat it with some 
ease. Then we have the KEYDISK (but hard 
drive-able) programs. These are the easiest to 
deprotect with information supiplied in earlier 
COMPUTIST issues (like issue #65). 

Rocket Ranger: There is no way to take out 
the code wheel in this game. The number input- 
ted is the only way to tell the game to go from one 
country to another. A "work around" is to disable 
the changing of the CDA interrupt vector then 
write a CDA that will allows you select the 
country you are in and the country you want to go 
to. Then the CDA would tell you the number of 
fuel units needed. Create the DESK.ACCS sub- 
directory on a backup rocket.ranger.l disk and 
copy the CDA into it. Then when you play the 
game and need the fuel units hit ctrl-open apple- 
esc and select the CDA and the two countries, 
remember the number, quit back to the program 
and enter the number. That's what the pirates did. 
For those of you with hard drives and GS/OS 
v5.0.x You might have noticed that you cannot 
run some ProDOS 8 based programs from your 
hard drive. Programs like Battle Chess, Neuro- 
mancer, ZanyGolf, MarbleMadness, Bard'sTale 
1 & 2. Well on Comp-u-Serve there is a packed 
file that contains information on how to upload 
and correctly run many deprotected ProDOS 8 
programs that otherwise don't seem to want to 
run. The idea behind the procedure (I think) 
revolves around purging everything possible from 
memory before running these programs. 

Putting Shanghai on a hard disk 

Alright, now that you sp)ent $700 for that 60 
meg SCSI hard drive (alter that statement to suit 
your own setup, EI: Internal drive, etc) you want 
to put your programs on it. That' s easy for SOME 
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deprotected programs, but impossible for oth- 
ers... or is it? Sometimes we need help with these 
typ>e of things, this is one good reason we sub- 
scribe to COMPUnST. So here is an example of 
adding hard drive compatibility to a program 
using Shanghai (START file in /SHANGHAI/ 
SYSTEM dated 15-Sep-87) from Activision.The 
reason I picked Shanghai as an example was I 
wanted it on my hard drive, so I set out to make 
it device independent. 



Hardkey for.. 



Shanghai 

ActivisioH 



Requirements: 

512K Apple ngs 
3.5" disk copier 
3.5" disk editor 
File copying program 
Hard drive 

Step one: Remove the copy protection. 

The first step in making any program hard 
drive compatible is removing the copy protec- 
tion. The first step in removing the protection is 
to make a copy of the game disk (ignore errors) 
and use only the copy from here on. Make the 
following patches (to the copy): 



Blk Byte 

$267 $145 
$27D $168 



From 

C9 0100F0 

18FBC2 30 



Is 

A9 01 00 80 

A9 01 00 6B 



Note: Using Block Warden [FJollow / 
SHANGHAI/SYSTEM/START. 



RelBlk 

36 

58 



RelBvte 

$4745 

$7368 



From 

C9 0100F0 

18FBC2 30 



la 

A9 01 00 80 
A9 01006B 



Step two: Change the hard coded names. 

The copy protection is now disabled, btit you 
cannot simply upload Shanghai to your hard 
disk. The program loads files like /SHANGHAI/ 
SYSTEM/DRAGONl, meaning find the disk 
called /SHANGHAI, then look in the subdirec- 
tory SYSTEM and load the file called DR AGONl . 
Now we don't want change the name of our hard 
drive to match this name. So I decided that we can 
change the /SHANGHAI to l/"something",butI 
didn't want to change the length of the name. I 
ended up dropping the first "A" in /SHANGHAI 
to make room for the "1". Also I finally decided 
instead of a subdirectory called SYSTEM we 
should call it DRAGON. Now you must edit the 
actual names in the file START. Disk names are 
easy to find using Block Warden as it will find 
upper, lower, and mixed case letters when search- 
ing for either case. Use Copy ][+ v8's (or higher) 
sector editor from BC3.SYSTEM or Block 
Warden from ProSEL (Block Warden users 
should still be foUowing START). 

Change all occurrences of /Shanghai/ 
System (hex: 2F 53 68 61 6E 67 68 61 69 2F 53 
79 73 74 65 6D) to 1/Shnc^i/Dragon (hex: 
312F5368.6E676841692F447261676F6E) 
at all of the following locations: 



$245 



fix!£ R d B lk RelBvte 



$08 2 $208 

$25 $225 

$40 $240 

$26D $0C 42 $520C 

$1E3 46 $5BE3 

$1FC $5BFC (cont. next blk) 

$15 47 $5C15 



$271 



$272 

Change /Shanghai to just 1/Shnghai at: 

Blk Byte RelBUc Rel Byte 

$272 $50 47 $5C50 

Alright, now that we have altered all the hard 
coded volume names we need to set up the NEW 
file structure. To begin format a new 3.5" disk 
with a name of /TEMP. 

1. Copy the file START from /SHANGHAI/ 
SYSTEM to /TEMP. 

2. Rename START to SHANGHAI. 

3. Create a subdirectory called SHNGHAI on / 
TEMP. 

4. Copy the following files from /SHANGHAI to 
/TEMP/SHNGHAI: 

Bamboo 

Canwin 

Didit 

Fairwinds 

Fourdots 

Mandaringarden 

Ninehigh 

Twosontop 

Winds 

5. Create a subdirectory called DRAGON in / 
TEMP/SHNGHAI. 

6. Copy the following files from /SHANGHAI/ 
SYSTEM to /TEMP/SHNGHAl/DRAGON: 

Titlescreen 

Copyright 

Tileset 

Dragonl 

Dragon2 

Tumament 

A tree directory of your new disk should look 
like this: 

File Name Type 

SHANGHAI SI 6 

/SHNOIAI DIR 

BAMBOO $F2 

CANWIN $F2 

DIDIT $F2 

FAIRWINDS $F2 

FOURDOTS $F2 

MANDARINGARDEN $F2 

NINEHIGH $F2 

TWOSONTOP $F2 

WINDS $F2 

/DRAGON DIR 

COMPUTIST #73 



TITLESCREEN 

CCPYRIGHT 

TILESET 

DRAGONl 

DRAG0N2 

TOURNAMENT 



PIC 
PIC 
PIC 
PIC 

PIC 
$F1 



Now to finally upload Shanghai to your hard 
drive pick any subdirectory and copy the files 
Shanghai & the subdirectory Shnghai into it. To 
play Shanghai simply laimch/run the S 16 file 
called SHANGHAI. That's "all" there is to it 

If you were successful in following my in- 
structions you should have a completely device 
independent game. Which means you can copy 
the program to any 3. 5 "disk. Hard drive, or RAM 
drive and launch it without problems. I have 
copied the files to /RAM5 and ran it without 
problems and Shanghai now resides in /CMS/ 
GAMES on my hard drive. Shanghai is now 
(thanks to COMPUTIST & RDEX) the way it 
should have been shipped: Deprotected, Hard 
drive compatible and you can launch it and quit 
back to the finder (ProSEL 16, Hyperlaunch, etc) 
without any problems. 

This same principle can be applied to other 
programs that requires a specific disk/volume 
name. 

Softkey for... 

King of Chicago 
Cinemaware 
Requirements: 

768K Apple Hgs 
3.5" Disk copier 
3.5" Disk editor 

In King of Chicago (KC) you try to take 
control of your gang and the city of Chicago. This 
new release from Cinemawares has very good 
graphics along with a few good animated scenes. 
The sound quality is a little lacking compared to 
Defender of the Crown which is also by Cine- 
maware. However, like DOTC, Cinemaware is 
using nibble counting on tracks $20 and $21. The 
one thing that stands out about this nibble count- 
ing is it's mutated form. This new form is useful 
in hiding the routine from krackers. It looks like 
this (on block $573): 



10D:0B 

10E:3B 

10F:38 

110f9FB00 

113:5B 

114«9F200 

117:1B 

118S4F4 

11AC230 

11C:AD0400 

11F:48 

12022000000 

124C2 30 

126:85F4 

128£8 

129 A9 2000 

12C:8O2A00 

12F:A90100 

132:8D2C00 

135:F4D602 

138:F4D602 

13B-.22AFOB0O 

13F:7A 
140:7A 
141:AD2E00 
144:80 30 00 
147:A92100 
14A:8D2A00 
14D:A9 0100 
150:80 2C 00 
153:F4 09 02 
158:F4D902 
159:22 AF OB 00 

15D:7A 

15E:7A 

15F:AD2E00 

162:803200 

18522M0O00 

169:36 

16A:18 

16B£90800 

16E:1B 

16F:2B 

ITOfiB 

171flB 

1723B 

173.-38 

174:E9FB00 

177:5B 

1 78:69 F2 00 

17B:1B 

17C:64F4 

17E:E230 

180:AD2C00 

183:48 

184AD2A00 

187:48 

188:02 30 

18AAO24 0O 

180:48 

18E:AO2200 

191:48 

192:E2 30 

194:22 0100 00 

198:E2 30 

19A:85F4 

19C:8E2E00 

19F:8C2F00 

1A2:68 

1A3:68 

1A4:68 



PLD 

TSC 

SEC 

SBC #00FB 

TCO 

ADC «00F2 

TCS 

STZ 64 

REP #30 

LOA 0004 

PHA 

JSL 000000 

REP #30 

STA F4 ' 
PU 

LOA #0020 

STA 002A 

LDA #0001 

STA 002C 

PEA 0206 

PEA 02O6 

JSL OOOBAF 

PLY 
PLY 

LOA 002E 
STA 0030 
LDA #0021 
STA 002A 
LOA #0001 
STA 002C 
PEA 02D9 
PEA 0209 
JSL OOOBAF 

PLY 

PLY 

LOA 002E 

STA 0032 

JSL 0000A4 

TSC 

CLC 

ADC #0008 

TCS 

PLD 

RTL 

PHO 

TSC 
SEC 

SBC #OOFB 
TCO 

ADC #00F2 
TCS 
F4 



Move nibble count to 
bank 00 



Load track iiumber $20 
Store it 

Load side number one 
Store it 



Goto nibble count 
routine 



Load sum 

Store sum for track $20 

Load track number $21 

Store it 

Load side number one 

Store it 



Goto nibble count 
niutine 



Load sum 

Store sum for track $21 



Return to sender 
Start of nibble count 
routine 



STZ 

SEP #30 
LDA 002C 
PHA 

LOA 002A 
PHA 

REP #30 
LOA 0024 
PHA 

LOA 0022 
PHA 

SEP #30 
JSL 0000C1 
SEP #30 
STA F4 
STX 002E 
STY 002F 
PLA 
PLA 
PLA 



8 bit wide Accum. 
Load side 
Push on the stack 
Load track 
Push on the stack 
lebilwideAcumm. 



8 bit wide Accum. 
Count them up 
8 bit wide Accum. 

Store half of sum 
Store second half 



1A5fi8 

1A6£8 

1A7fi8 

1A8C2 30 

1AA:A5F4 

1AC:F0 10 

1AE:F40000 

1B122 9D3001 

185:7A 

1B6:F4 00 00 

1B9220E32 01 

1BD:7A 

1BEA5F4 

1C0:D0BC 

1C2:A90100 

1CS:802800 

1C8:3B 

1C9:18 

1CA:69 0800 

1CD:1B 

1CE:2B 

ICFfiB 



PLA 
PU 
PLA 
REP 
LDA 
BEO 
PEA 
JSL 
PLY 
PEA 
JSL 
PLY 
STZ 
BNE 
LDA 
STA 
TSC 
CLC 
ADC 
TCS 
PLD 
RTL 



Pull extra values off 

of the stack 
#30 Set 16 bit wkle Accum. 
F4 Zero means no errors 
1BE(+10) 
0000 
01309D 

0000 
01320E 

F4 

17E(44) 
#0001 
0028 



#0008 



Return to caller 



So now I need to find the routine that would 
compare the retumed sums to known benchmark 
values. So I scanned the file for references to 
0030 and 0032 and found the following code in 
the first block ($508) of the file. 



194.-08 

195:3B 

196:38 

197:E9FB00 

19A:5B 

198.-69 F4 00 

19E:1B 

19F:AD3000 

1A238 

1A3:E9401F 

1A6:F00C 

1A8:7003 

1AA:490060 

1AD:10 05 

1AF:9C2600 

1B2:800S 

1B4:A9 0000 

187:8011 

1B9AO3200 

18C:38 

1BD:E9 781E 

1C0:7003 

1C2:4g0080 

105:30 03 

• 1C7:9C2600 

1CA:A8 

1CB:3B 

1CC:18 

1CD.-690600 

100:18 

, 101:98 

"102:26 

,103:68 

1D4.-0B 

1D5:3B 

106:38 

1D7:E9FB0O 

1DA:5B 

108:69 F2 00 

1DE:18 

1DF:AD26 00 

1E2:F039 

1E4:F4E803 

1E722 3B6F05 

1EB:7A 

1EC:48 

1ED:F4 00 7D 

1F0:22 3B6F05 

1F4:7A 

1F5:0A 

1F6:A2 0000 

1F9:0A.. 

1FA:48 

1FB:A9OC02 

1FE:A2DC02 

001 -.22 95 40 00 

005.-68 

006:FA 

007:85 F6 

009:86 F8 

00B£8 

00C:87F6 

00EA5F4 

010:E6F4 

01238 

013:E9 00 07 

016:7003 

018:490080 

018:10 C7 

010:38 

01E:18 

01F:6908 00 

022:18 

023:28 

024 £8 ' 



PHD 

TSC 

SEC 

SBC #00FB 

TCD 

ADC #00F4 

TCS 

LOA 0030 Load sum for track $20 

SEC 

SBC 

BEQ 

8VS 

EOR 

BPL 



STZ 
BRA 
LDA 
BRA 
LDA 
SEC 
SBC 
BVS 
EOR 
BMI 

STZ 
TAY 
TSC 
CLC 
ADC 
TCS 
TYA 
PLD 
RTL 
PHD 

TSC 

SEC 

SBC 

TCD 

ADC 

TCS 

LOA 

BEQ 

PEA 

JSL 

PLY 

PHA 

PEA 

JSL 

PLY 

ASL 

LOX 

PHX 

PHA 

LDA 

LDX 

JSL 

PLA 

PLX 

STA 

STX 

PLA 

STA 

LDA 

INC 

SEC 

SBC 

BVS 

EOR 

BPL 

TSC 

CLC 

ADC 

TCS 

PLD 

RTL 



#1F40 Subtract towest limit 

184 (+0C) Equal is a bad copy 

1AD(+03) 

#8000 Now check if loo tow 

184 (i05) Sum too tow, then 

badcopy 
0026 Set flag for good copylll 
1B9(+05) Now check track $21 
#0000 

1CA(+11) Goto end of routine 
0032 Load sum for track $21 

#1 E78 Subtract towest limit 

1C5(+03) 

#8000 Now check if too low 

1CA(-f03) Sum to tow, then bad 

copy 
0026 Set flag for good copylll 



#0006 



Return to the^oter;;' 
Start of routine to check' 



«0OFB 

#00F2 

0026 Load pass/fail flag 
010 (+39) Only zero passesi 
03E8 Routines to set up crash 
056F3B later in the game 



7D00 
056F38 



#0000 



#02DC 
#02DC 
004095 



F6 
F8 

[F6] 

F4 

F4 

#0700 
01 8 (+03) 
#8000 
1E4(-39) 

Continue for the real game 

#0008 



Return to caller 



You can see from the above listed code the 
only thing that really needs to be changed is the 
BEQ OlD (FO 39) at $1E2. However, for techni- 
cal reasons I decided to make the following 
changes. First, the nibble count routine should 
never be run, so it was disable by putting a RTL 
(ReTum from Long subroutine) at byte $10D of 
block $573; the actual startofthenibblecounting 
routine. Second the compare code will always 
fail dye to the copied disks, so the actual call to 
the routine was disabled. Third, the flag (0026) 
should equal zero, so the LDA instruction is 
changed to STZ (store zero) and the BEQ is 
changed to BRA (branch always). 

Note: I back traced the flag setting routine to 
it's original caller (Block $5E8, byte $97 from 22 
94 01 01 to AF 94 01 01) and bypassed it there. 



I think either edit would work fine, but I decided 
that setting the flag is the best way to do it 

With these three edits a very tricky protection 
scheme is totally bypassed. I play tested the 
resulting copy for an hour (through two games as 
far as I could get) and didn't encounter any 
bombs. The step by step method: 

1 . Make a co{)y of both disks. 

2. Make the following edits to a copy of the boot 
disk. 

Blk Bvte From To 

$508 $1DF AD 26 00 9C2600 

$1E2 F0 39 8039 

$573 $10D OB 63 

$627 $1B4 22 54 0101 AF 54 01 01 

Don't forget to write the blocks back to the 
copy disk. Store the originals in a safe place. Play 
off the deprotected copies. 

A final note: I think the game should be 
completely hard drive compatible with the ab- 
sence of the copy protection. 



Softkey for.. 



Geometry vl.O 
Broderbund 



Requirements: 

512K Apple ngs 
3.5" Disk copier 
3.5" Disk editor 

GeometryGS (GGS)fromBioderbund/Saisei 
is a three disk package that is designed to teach 
you geometry at your own pace. The package 
uses a KEY DISK protection in the form of a 
nibble count on disk three. Disk one is simply a 
system disk to launch the geometry programs 
from disk two or disk three. When you run the 
program off disk two it asks you to insert disk 
three for nibble coimt However, when you nm 
the program from disk three, it proceeds to the 
lessons. So only disk three is being checked for. 

I remembered that Broderbund used the stan- 
dard 3.5" niU>Ie counting routine on Showoff 
and software companies tend to use the same 
protection routines a couple of times. With this in 
mind I began by searching for the usual A2 20 AO 
01 and found die routine on block $32D (and on 
the last half on block $32F), it looks like this: 



194:08 

195f230 

197:A220 

199:A001 

19B.-8B 

19C:4B 

19D:AB 

19E20A601 

1A1:D023 

1A3fiA 
1A4SDD701 
1A7S8 
1A8:8DD801 

1ABX)DD701 
1AE:F016 

1B0A2 21 
1B2:A001 
18420 A6 01 

187:0000 

1B9:8A 
1BA:8DDA01 
180.^ 
18E:80DB01 



Set 8 bit Ace 8i registers 
Load track number 
and side 



PHP 

SEP #30 

LOX #20 

LDY #01 

PHB 

PHK 

PIB 

JSR 01 A6 Go to the next step 

BNE 1C6(+23) Accum = means no 

errors 
TXA 

STA 0107 
TYA 
STA 01 Die 



Store fust li^ of si^, 



Store th&second half for 

track $20 
ORA01D7 
BEQ 1C6(+16) Failed if this blanch 

is taken 
LDX #21 Now lets do track $21 
LDY #01 and the side 
JSR 01 A6 Onestepctosertothe 

nibble count 
BNE 1C6(+0D) Accum = means no 

errors 
TXA 
STA 
TYA 
STA 0108 



01 DA Store first half of sum 



1C1:0DDA01 

104:0013 

106:48 

1C7:A933 

109:800701 

1CC:8D0801 

1CF:80 0A01 

102:80 0801 

105:68 

106:820200 

1D9:A900 

1DB:AB 

1DC:8F 000000 STA 

1E0«F0000 00 STA 

1E428 

1E5£6 

1E6£A 



Store the second half for 
track $21 



ORA 01 DA 
BNE 109 (+13) 



PHA 
LDA 
STA 
STA 
STA 
STA 
PU 
BRL 
LDA 
PLB 



#33 
0107 
0108 
01 DA 
01 OB 



Push Ace for a second 
Load funny' value 



Change sums to 3333 
Get the old Accum back 

1DB(+0002) 

#00 



000000 
000000 



PLP 
RTL 
PHY 



1E7:DA 

1E8f4CF01 

1EBf4CF01 

1EE22000000 

1F2:8OO501 

1F5:68 

1F6:68 

1F7:68 

1F8£8 

1F9:68 

1FA:68 

1FB:ADD501 

1FE:60 
1FF:88 
000:48 
001 :AB 
002AOD701 

005 :AB 

006 £8 
007:88 
008:48 
009 AB 
00A:AODA01 

0OD:A8 



PHX 
PEA 
PEA 
JSL 
STA 
PLA 
PLA 
PLA 
PLA 
PLA 
^^ 
LOA 

RTS 
PHB 
PHK 
PLB 
LOA 

PLB 
RTL 
PHB 
PHK 
PLB 
LOA 

PLB 



Return to caller 
Push side (this is one 
step closer) 
Push track 

Push disk volume/name 



01 OF 

01 OF 

000000 Count them up 

01 05 Store Accum for a sec. 



0105 



01 D7 



Pull all extra values 
off the stack 
Get the old value back 
into the Accum 
Return to sender 



Load nibble count sum 
for track $20 



01 OA 



Then return 



Load nibble count sum 
for track $21 
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00E:6B RTL Then return 

00F:4449534B3300 DISK3 name/volume in ASCII 

That was the nibble counting routine, now I 
back traced the program to see where it was 
called from. I came across a section of code that 
calls the nibble count and then compares the 
returned values. This new routine starts at byte 
$1AS on block $406 and continues through to 
byte SAD on block $407. The important parts 
look like this (on the disk): 

1DF:22 00 00 00 JSL 000000 Goes to the nibble 





counting section 


1 £3:22 00 00 00 


JSL 000000 Goes to IF In the 




above code section 


1E7:85EA 


STA EA Store track $20 nibble 




count sum 


1E9:220000 00 


JSL 000000 Goes to 007 in the 




above code section 


1ED:85E8 


STA E8 Store track $21 nibble 




count sum 


1EF:ADOO0O 


LDA 0000 


1F2:8D0O0O 


STA 0000 


1F5:AD0000 


STA 0000 


1F8:D0 3E 


BNE 038 (+3E) 


1FA:A5EA 


LDA EA Load track $20 nibble 


1FC:38 


SEC count sum 


1FD:E9401F 


SBC #1F40 Compare against low 




endof1F40 


000:70 03 


BVS 005 (+03) So far so good 


002:490080 


EOR#8000 


005:1031 


BPL 038 (+31) branch If failed 


007A5EA 


LDA EA Reload track $20 sum 


00938 


SEC 


OOA:E9D0 20 


SBC #2000 Compare against high 




end of 2000 


0OD:F0 07 


6EQ 016 (+07) Ok, still going 


0OF:7O03 


BVS 014 (+03) 


011:4900 80 


EOR #8000 


014:30 22 


BPL 038 (+22) branch If failed 


016:A5E8 


LDA E8 Load track $21 nibble 


018:38 


SEC count sum 


019:E9B01D 


SBC #1OB0 Compare against low 




endoflOBO 


010:7003 


BVS 021 (+03) It's still good enough 


01E:49 00 80 


EOR #8000 


021:1015 


BPL 038 (+15) branch If failed 


023:A5E8 


LDA E6 Reload track $21 sum 


025:38 


SEC 


026:E9 781E 


SBC #1E78 Compare against high 




endof1E78 


029:0003 


BNE 02E(+03) 


028:8268 00 


BRL 0g6(+0068)lfitgetsthlsfarlt'5a 




good copy 


02E:70 03 


BVS 033 (+03) 


030:4900 80 


EOR #8000 


03330 03 


BPL 038 (+03) branch If failed 


036:8255 00 


BRL 096 (+0055) It must be an original 




If it gets here 


038:AO0O00 


LDA 0000 



I then proceeded to back trace this routine to 
it's original caller. I was rewarded with JSL 
000D8E (22 8E CD 00) on block $408 (on disk 
two). So changing the JSL instruction to a LDA 
results in a kracked copy. I found the exact same 
code on disk three but in a different place. 

However, you still had to insert disk three 
when latmching the program on dbk two. Or, if 
you launched either program from your hard 
drive you where prompted to insert disk three. I 
would normally hit the cancel button and things 
would go along just fine. Then, when I was 
typing up this article, I decided to take another 
look at the code. Here is what I figured out (block 
$408 on disk two): 



85:F40000 

88:F40000 

8B:22000000 

8F:7A 

90:7A 

91:D4F0 

93:22 8E0O 00 

97:7A 



PEA 0000 

JSL 000000 

PLY 

PLY 

PEI 

JSL 



FO 



PEA 0000 Push memory location 
of volume name 
Push the other half 
If not on disk 3, ask for It 
Pull off the two bytes 
pushed on 

Push some Infofmation 
OOODSe Do tn nibble count 
routines above 

PLY Pull the pushed 

information off 

So I go out my old copies and made an 
additional patch and upload die program files to 
my hard drive. Everything loaded in just fine, and 
I wasneverprompted for disk three again, whether 
latmched from 3.5" disks or a hard drive. The 
complete edits are as follows: 

1 . Copy all three disks. 

2. Make the following changes by disk: 

On disk two: 



$408 



Byte 
$8B 

$93 

On disk three: 



Ftom To 

22000000 AFOOOOOO 
228E0D00 AF8EOD0O 



From To 

22000000 AFOOOOOO 
228E0D00 AF8E0DOO 



m Bj3S 
$E7 $1C6 
$1CE 

Don't forget to write the blocks back to the 
copies. Store the originals in a safe place. Op- 
tional: Upload the program to your hard disk. 
Learn all about Geometry! 

Softkey for... 

Downhill ChaUenge 
Broderbund 

Requirements: 

512KApplengs 
3.5" disk copier 
3.5" disk editor 

Downhill ChaUenge (DC) from Broderbund 
is like the name implies a skiing game/simula- 
tion. The graphics are good and you control the 
skier with your mouse so it's easy to play. Of 
course the reason I'm writing this article is be- 



cause the program is copy protected. To start off, 
the program is published by Broderbund and they 
have release four (or so) GS programs all using 
the popular nibble counting scheme. So search- 
ing for the ever present A2 20 AO 01 reveals the 
nibble counting routine on block S5C8. The 
routine is very much like the one used for Show- 
off and goes like this (as it is on the disk): 



075:88 
076:48 
077 A8 

078AFF61000 
07C:48 

07D:2242 0D00 
081 £8 
08220 51 OC 
085AFB514 00 
089:F0 05 

08B:20DE0C 

08E:80F2 

09022 01 00 00 

094 AB 

095 £8 
096A9 00 00 
099:8FBS1400 
090:08 
09E:E230 
0A0A2 20 
0A2A001 
0A420 84 0C 
0A7:BO15 ' 

OA920A30C 

0AC:B010 

0AEA2 21 
0B0A0 01 
082:20 84 OC 
085:8007 

0B7:20 8F0C 

0BA:8O02 

0BC:28 
080:60 

0BEAF851400 
0C2:1A 

OC3:8F8514 00 
0C7:28 
0C8:60 
0C9:8E13 0O 
0CC:8C14 0O 
0CF:5A 
0D0:DA 
OD1:F400 00 
0D4:F4 34 00 

007:22 E3 00 00 

0DB:8D15OD 

0OE:68 

0DF«8 

OE0fi8 

0E1«8 

0E2£8 

0E3«e 

0E4:AO15 0O 

0E7«0 

0E8:8E160D 

0E8:8C170O 
OEEflS 
0EF:C2 30 



PHB 

PHK 

PLB 

LDA 001 0F6 

PHA 

JSL 000042 

PLA 

JSR 0C51 Do the KEYDISK check 

LDA 001 4B5 Load the flag 

BEQ 090 (+05) Zero means pass/ 

original 
JSR OCDE Print insert masters 

wait for keypress 
BRA 082 (-0E) Back up to KEYDISK 

check 
000001 



JSL 
PLB 
RTL 
LDA 



Return to call 
#$0000 Load a passing value 
STA 001 485 Store in flag 
PHP < — Patch number 1 goes here 
SEP #$30 SbJtwIdeAccum&regs 
LDX #$20 Track $20 
LDY #$01 Side 
JSR 0C84 Go to nibble count 
BCS 0BE(+15) Carry set means 

read error/wrong disk 
JSR 0CA3 Go compare bench 

marks for track $20 
BCS 0BE(+10) Nibble count sum 

dkjn't pass 
LDX #$21 Track $21 
LDY #$01 Side 
JSR 0C84 Go to nibble count 
BCS 08E(+07) Carry set means 

read error/wrong disk 
JSR OCBF Go compare bench 

marks for track $21 
BCS 0BE(+02) Nibble count sum 

didnt pass 
PLP 

RTS Return as pass/original 

LDA 001 4B5 Load the flag 
INC Inaement the value 

STA 001 4B5 Store it back In the flag 
PLP 

Retum as fall/copy 

Store track number 

Store side 

Push side 

Push track 



0013 
001 4 



RTS 

STX 

STY 

PHY 

PHX 

PEA 0000 

PEA 0D34 



JSL 
STA 
PU 
PLA 
PW 
PLA 
PU 
PU 
LDA 
RTS 
STX 



Push pointer to disk 

name 
0OODE3 Count them up 
0015 Temp storage for Accum 



0D15 



0016 



STY 0017 
PHP 
REP #$30 



Pull all values pushed 

on stack 

Reload Accum 

Return to sender 

Store first half of nibble 

count sum 

Store the other half 



0F1;AO160O LDA 0016 



0F4:C9B01D 

0F7:9008 

0F9:C9 791E 

0FC:B003 

0FE:28 

0FF:18 

100«0 

10128 

102:38 

103.-60 

104:8E16 00 



16 bit wide Accum & 

regs 

Load sum as one 16 bit 

value (track $20) 
CMP #$1 080 Compere to tow end 
BCC 1 01 (+08) Too low then goto tail 
CMP #$1E79 Compare to high end 
BCS 1 01 (+03) Too high goto M 
PLP 

Cany drs sum passed 

Retum 



CLC 
RTS 
PIP 
SEC 
RTS 
STX 



0016 



107:801700 
10A:08 
108:0230 
10D:AD160D 



STY 0017 
PHP 

REP #$30 

LDA 0016 



Carry set = sum failed 
Retum anyway 
Store first half of nibble 
count sum 
Store the other half 



110:806514 STA 1465 



113:09 8010 

11630 08 

118:09 79 IE 

118:8003 

110:28 

11E:18 

11F:60 

12028 

121:38 

122:60 

123:20 00 00 



set 16 bit Accum & regs 

Load as one 16 bit value 

(track $21) 

Store in 'last chance/ 

movement" flag 
CMP #$1 080 Compare to low end 
BCC 120 (+08) Too low then goto fail 
CMP #$1 E79 Compare to high end 
BCS 120 (+03) Too high, goto fail 
PLP 

Carry cir = sum passed 

Retum 



126:F4 0000 
129:F4180D 
12C:A20C1C 
12F:22 00 00E1 
133:F4 00 00 
136:F40100 
139:A2 0C22 
1X:22 00 00E1 
140«8 
141:20 0000 

144:60 



CLC 
RTS 
PLP 
SEC 
RTS 
JSR 

PEA 
PEA 
LDX 
JSL 
PEA 
PEA 
LDX 
JSL 
PU 
JSR 

RTS 



Carry set = sum failed 
Retum anyway 
Dec7pt 'Insert 
Master...' text 



ODOO 

0000 

0018 Push pointer to text 

#$1 COO Tool = WriteString 

El 0000 Tool call 

0000 

0001 

#$220C Tool = ReadChar 

El 0000 Tool call 



145:E2 20 

147A21B00 

14A:8D18 0D 

140:4955 

14F:9D180D 

152:CA 

153:00 F5 

155^:2 20 

157.-60 

15820 

159X)1 

15A.tX) 

15B«)00 



SEP #$20 8 bit Accum, 16 bit regs 

LDX #$0018 set count to 26 (dec) 

LDA 001 8,X get encrypted character 

EOR #$55 EOR with key 

STA 0D18,X Store normal character 

DEX decrement count 

BNE 14A(-0B) do again until zero 

REP #$20 
RTS 



150:18 

15E:1C3B26 30 27 
163:21 75 11 3A 22 
168:3810 303939 
160:7518 34 26 21 
172:30 27 7511 X 
17726 3E 



20 0013 -Track* storage 
01 0014- Side # storage 
00 0015 -Temp Accum 

storage 
0000 0016 -Nibble count 

sum storage 
18 0018-Startof 
WriteString text 
Encrypted "Inser" 
Encrypted 't Dow' 
Encrypted "nhill' 
Encrypted ' Masf 
Encrypted 'er Di" 
Encrypted 'sk' 
followed byDisk name in low ASCII 
179:444F574E48 DOWNH 

17E:4940402E49 ILLI 

183:494753 IGS 

That was a nice little routine to follow and 
comment. Well just like Showoff we want to 
store the right value (zero) in the flag. So we 
change the PHP (08) at 09D to RTS (60), this way 
the first flag is set and the code returns right away. 
The actual nibble count (and checking for a disk 
called DOWNHILL.IIgs) are never run. At this 
point, if you where to run the game every thing 
would work just fine, until you tried to move your 
guydown the slope! The games is no good if you 
cannot move your man. 

If you remember at 1 10 the STA 14C5, what 
I call the last chance/movement flag. I tried every 
way I can think of to find how the program was 
accessing the flag, but no luck. So I decided to 
implant the values, that is, write them directly to 
the disk. I loaded Downhill Challenge into 
memory and found 14C5 and wrote down the 
surrounding bytes (CD 00 [00 00] 7C 00 B4 - the 
brackets show 14C5 in the sequence) and searched 
the disk for them. I found the right spot and wrote 
a good value of 1E40 (40 IE on the disk) in that 
spot. Actually any value between the above bench 
marks of SIDBO and $1E79 would work. With 
the three byte patches installed I tested the pro- 
gram and found everything to work as on the 
original. 

1. Copy the Downhill Challenge game disk. 

2, Make the following edits to the copy: 
From To 



Blk Bvie 
$5C8 $9D 
S5CC $AA 



08 
0000 



60 
40 IE 



3. Write the block back to the copy 

Downhill Challenge is now completely de- 
protected and can be run from a hard disk or 
RAM drive without the need for the original as a 
KEYDISK. 



Softkey for... 



Grand Prix Circuit 

Accolade 

Requirements: 

512KApplengs 
3.5" disk copier 
3.5" disk editor 

Grand Prix Circuit (GPC) is racing game of... 
the grand prix circuit. The program is from 
Accolade and is somewhat similar to The Duel: 
Test Drive II also by Accolade. The game is 
protected is the same fashion as most {Hograms 
from Accolade and that is nibble counting on 
tracks $20 & $21 of the 3.5" disk. Searching for 
standard string (A2 20 AO 01) will reveal the 
routine on block $1 12 of GPC. The routine is as 
follows (on the disk): 



12F:C230 
131 5A 
132:88 
133:48 
134AB 
1353C97B2 
138:E230 
13AA2 20 
13C:A001 
13E2046B2 
141:8E97B2 
144:8C98B2 
147:0230 
149A097 82 
140:C9 60 20 
14F:90 29 
151:09 02 21 
154:80 24 
156:E2 30 
158A2 21 
15AA0 01 
150:2046 82 
15F:8E97B2 

162:8098 82 
165:02 30 



set 16 bit Accum & regs 



REP $#30 

PHY 

PHB 

PHK 

PLB 

STZ 8297 Zero nibble count sum 

SEP #$30 set 8 bit Accum & regs 

LDX #$20 Track $20 

LDY #$01 Side 

JSR B246 Go to nibble count 

STX 8297 half of nibble count sum 

STY 8298 Store the other half 

REP #$30 set 16 bit Accum & regs 

LDA B297 Load 16 bit sum 

CMP #$2060 Compare to low end 

800 17A(+29) Too low, goto fail 

CMP #$2102 Compare to high end 

BOS 17A(+24) Too high, goto fail 

SEP #$30 8 bit wide Accum & regs 

LDX #$21 Track $21 

LDY #$01 Side 

JSR 8246 Go to nibble count 

STX 8297 Store half of nibble 

count sum 

STY 8298 Store the other half 

REP #$30 16 bit wide Accum & 



ODOO 



167AD97B2 LDA 8297 Load the sum as one 16 

bit value 
16A:09 80 ID CMP #$1 080 Compare to low end 
16D:90 0B 800 17A(+08) Too low then goto fail 

1 6F:09 78 1 E CMP #$1 E78 Compare to high end 
172:8006 BCS 17A(+06) Too high then goto 

fail 
174:02 30 REP #$30 Make sure we retum in 

Encrypt 'Insert 16 bit 

Master...' text 176AB PLB 

Retum to caller 177:7A PLY 



178:28 
179«B 
17A:C2 30 
17O:A900D0 
17F:8F9F35 03 
183 :A8 
184:7A 
185:28 
186£8 
187:E2 30 0000 

18B:8E65B2 
18E.80 66B2 
191:5A 
192:DA 
193:F4O4 0O 
196:F4 68B2 

1 99:22 E3E7 04 

190:80 67 82 

1A0£8 

1A1:68 

1A2«8 

1A3:68 

1A4:68 

1A5:68 

1A6AD67B2 

^9.-60 

1AA:20 

lABfll 

1AO:00 

1AD:475043 



PLP 

RTL 

REP #$30 

LDA #$0000 

STA 03359F 

PLB 

PLY 

PLP 

RTL 

E2 30 00 00 

STX 8265 
STY 8266 
PHY 
PHX 

PEA 0004 
PEA 8268 

JSL 04E7E3 

STA 8267 

PU 

PU 

PU 

PU 

PU 

PU 

LDA 8267 



Retum to caller 
Fail njutine starts here 
Load a fail value 
Store It In a flag 



Return anyway 

Extra bytes??? - Not 
used at all 
Store track 
Store side 
Push side on stack 
Push track on stack 

Push pointer to disk 

name 

Count them up 

Temp store Accum 



Pull all pushed on data 

Reload Acaim 
RTS Retum 

20 8265 - Track storage 
01 8266 - Side storage 

00 8267 -Temp Accum 

storage 
GPC 8268 - Disk name in low 

ASCII 

Well that was pretty straight forward code 
and easy to follow. C^ a pass condition the 
routine does not retum any special value or data 
so I back traced the routine to it's caller and made 
my edit. The call was in the form of JSL 04B 1 E9 
(22 E9 B 1 04) and is only found once on the disk. 
Changing the JSL to a LDA will krack Grand 
Prix Circuit. Step by Step: 

1 . Make a copy of the Grand FVix Circuit game 
disk. 

2. Make the following edits to the copy: 

Blk Bvie ' From la 

$104 $23 22 E9 31 04 AFE9B104 

3. Write the block back to the disk. 



Softkey for.. 



Neuromancer 
Interplay 



Requirements: 

512KApplengs 
3.5" disk copier 
3.5" disk editor 

Neuromancer from Interplay uses a KEY- 
WORD (pirate) copy protection. Although the 
use of the codewheel is well integrated into the 
game, it is still a bothersome routine. Every time 
you try to access the PAX system you must whip 
out the old codewheel and spin it around. After 
some digging and some help from a friend we 
narrowed it down to a single call. Changing the 
call to three NOPs disables the whole codewheel 
routine without change to any other aspect of the 
game. Again, here it is okay to use NOPs as the 
program is ProDOS 8 based and is not relocat- 
able. To deprotect this one: 

1 . Make a copy of the Neuromancer game disk. 

2. Make the following edits to the copy: 



Blk 
$109 



Bvte 
$FE 



From 
20 FC 74 



Is. 

EAEAEA 



3. Write the block back to disk 
Go kick some ICE. 

Softkey for... 

USA Geograph vl.O 

MECC 

Requirements: 

768K Apple Dgs 
3.5" 4isk copier 
3.5" disk editor 

USA Geograph is just like World Geograph 
in design and copy protection. A simple check for 
a bad block through ProDOS 16 (22 A8 00 El 
22). For other GS tyj)e programs from MECC 
you might try searching for 90 05 20 and you 
should see some thing like the "from" column in 
the edits below. Make the same kind of changes 
and you should have a kracked copy to use. 

1. Make a copy of both disks (ignore errors). 

2. Make the following changes to disk one: 



Blk 
$445 



Bvte 

$E2 
$E5 
$E7 
SEA 



From 
20 52 OB 
90 05 
20 5C OA 
80 23 



le 

AD 52 OB 
80 03 
AD 5C OA 
18 EA 



3. Write the block back to the copy. 

Optional: Upload the program to your hard 
disk. 

Softkey for... 

Arlianoid II: Revenge of Doli 

Taito 

Requirements: 

512KApplengs 
3.5" disk copier 
3.5" disk editor 

Arkanoid and Arkanoid II frojn Taito both 
use a special signature check for copy protection. 
This routine was written by NovaLogic (who 
seems to do program conversions for Taito) and 
is a GS version of the routine outlined in my Qix 
article (COMPUTIST #7 1 , p9-l 0). The easy way 



14 



BeadeF& Data Exchange 



COMPUT4RT./f73 



to tell if this routine is being used is to search the 
disk for OC 07 03 09 (found on Arkanoid OS, 
Arkanoid 11 GS, and Renegade //e). 

The CP routine searches for a copy protection 
header of D5 CC AA then reads flie following 
four bytes and stores them. Then it loops through 
a routine to find the CP header and compares the 
four following bytes to the four bytes it read the 
first time. These special byte have many zeros (I 
mean MANY, using COPY ][+ check the length 
of any track and compare it to a normal disk) 
bytes between them. When the hardware tries to 
read these bytes (with many zero bytes (not just 
zero bits)) 75% of the time the bytes will NOT 
match. 

This pwotection cannot be copied with any 
copy program on the market. In fact it is easier to 
krack it then back it up. The CP routine has four 
entry points. At +73 the routines determine the 
presents of a GS and Smartport. At +A3 the 
routine calculates the slot and drive number. At 
+B6 is the actual routine that determines if you 
have an Apple or Unidisk 3.5" disk and does the 
actual check. At+lDl is the routine that adds up 
the "read-match-flags" and compares them to 
$0C (12 in decimal). To remove find the first 
three calls to the CP and disable them, search for 
A2 05 00 AO 1 00 22 A3 the next byte (say it was 
a 08) will tell you the other values to search for. 
That is 22 73 08, 22 A3 08, and 22 B6 08. change 
each 22 to AF and then find the OC 07 03 09 and 
change them to any for bytes, that when added 
together, are between 01 and OC (like 04 04 04 00 
or 01 01 01 01, etc). 

YouMUSTleavethe-f-lDl entry point active 
to let the program read the implanted values 
(thinking the CP routine put them there). Finally 
there are two version of Arkanoid II; the early 
version had some bugs in it, but the same byte 
strings are there (in different places). The follow- 
ing edits are for the second version; 

1. Make a copy of the Arkanoid II game disk. 

2. Make the following edits to the copy ONLY: 



ProDOS 1 6 entry p6int (machine language inter- 
face - MLJ) with the command number for a 
block read. The whole routine looks like this on 
the disk (Block $13): 



Blk 


Byte 


From 


lo 


$32A 


S69 


22 73 08 00 


AF 73 08 00 




$73 


22 A3 08 00 


AF A3 08 00 




$A5 


22 B6 08 00 


AF B6 08 00 




$A9 


9009 


80 09 


$3DC 


$92 


OC 07 03 09 


04 04 04 00 



3. Write the blocks back to disk. 

Now you are asking why are the edits for 
Arkanoid 1 different then those above (see Issue 
#70 from "StarBuck", which are my edits any- 
way). Well if you follow the code as it runs the 22 
89 OC 00 becomes 22 B6 09 00, this is done to 
confuse the kracker. At various points while 
trying to krack Arkanoid 1 (before I disassembled 
the whole CP routine) I made edits and tried to 
bootthegame.Theprogramcaughtonandpvinted 
the message about the "Devious and warf)ed 
software pirate" and the little kicker "it' s going to 
1)6 a long ni|ht dude" Irnaigine someone thoiight 
this CP routine so hard to figure out they put in 
remarks that revive your energy in your quest to 
remove it! The actual CP routines are quite hard 
to follow, they use PER +2 (Push Relative) and 
BRL. This is a relocatable JSR, as PER pushes 
the relative address two bytes after itself. Then 
the BRL (which is a three byte instruction) 
branches to the routine. The routine branched to 
will end with a RTS and the machine pulls the 
address pushed on the stack by the PER and adds 
one to it and continues the program. Basically a 
manual JSR type call, but fully relocatable with- 
out the need to modify each address. 

Bug in Crystal Quest Mod (issue #71) 
In issue #7 1 in my article on modifying Crys- 
tal Quest (Casady & Greene) there seems to be 
some instructions missing. You MUST create a 
NEW subdirectory called CRYSTAL and copy 
SHAPES, SOUNDS, and SAVE into it. Here are 
the remaining steps. 
Requirements: 
512KApplengs 
File copy program 

Modified Crystal Quest from COMPUSTIST 
#71 

Add the following after step 7 (before the tree 
directory): 

8. Format a disk called /TEMP. 

9. Copy CRYSTAL.SYS16 to /TEMP. 

10. Create anew subdirectory called CRYSTAL 
on /TEMP. 

11. Copy the following files from the Crystal 
Quest disk into /TEMP/CRYSTAL: 

SHAPES 

SAVE 

SOUNDS 

Now the rest of the article should make sense. 
Sorry about the missing steps, I have many ver- 
sions of my articles around here and once in a 
while I send an early incomplete version. 



Softkey for... 



Three Stooges 
Cinemaware 



Requirements: 

1.25M Apple Ilgs 
3.5" disk copier 
3.5" disk editor 

The Three Stooges (TS) fi-om Cinemaware 
has finally been released for the Apple Ilgs. The 
game has good graphics with some great digit- 
ized soimds from actual Three Stooges shows. 
TS is using a KEYDISK type of copy protection 
by checking for a bad block on (isk one. The 
routine is simple to fmd by searching for 22 A8 
00 El 22 00 which is the code for jump to the 



116:48 
117;F4F7F 



PHA 
PEA 7FFF 



Push some data for tool 

call 
11AA2080F LDX #0F08 
11 0:22 0000 El JSL E10000 Go do the tool call 
121:A3 01 LDA 01 ,S 

123:EB XBA 

124:29 FF 00 AND #OOFF 
127:48 PHA 

128:20 B4A2 JSR A2B4 Check to see if we're on 

a hard disk 
12B«8 PLA 

12C:C9 01 00 CMP #0001 Anything but one means 

hard drive 
12F:D0 3B BNE 16C{+3B) Branch past the 

KEYDISK check 
131 52 A8 00 El JSL El 00A8 ProDOS 16 entry point 

(MLI) 
135:20 00 0020 

GET_DEVICE_NUMBER 
137:71 A2 00 00 0000A271 Memory location of 

parms for ProDOS call 
13B30 05 BCC 142 (+05) Carry clear means 

we're on the right disk 
130:20 FCA8 JSR A8FC Set up to try a different 

disk ' 
140:80 EF BRA 131 (-1 1)Go back and get the 

device number 
142:AD75A3 LDA A375 Load the device number 
145:80 77 A3 STA A377 Store in the 

READ_BLOCK parms 
148A9 00 00 LDA #0000 
14B:8D79A3 STA A379 
14E:A5 54 LDA 54 Load block to read 

150:8D7BA3 STA A37B Store it in the parms list 
1 53 :22 A8 00 El JSL El 00A8 ProDOS 1 6 entry point 

(MLI) 
1575200 0022 READ_BLOCK 

159:77 A3 00 00 0OO0A377 Memory location of 

parms for ProDOS call 
150:90 05 BCC 164 (+05) Carry set means NO 

error (it's copy) 
1 5F:C9 27 00 CMP #0027 Make sure it's an \/0 

en'or (bad block) 
162:F008 BEQ 160(^08) If it was a bed disk 

read then continue 
164:A9ED0O LDA «OOED Load value for Insert 

master 
16720 03 A9 JSR A903 Ask for "Three Stooges 

REEL#r 
1 6A:80 C5 BRA 1 31 (-3B) Start over & get the 

device number again 
1 6C:68 PLA Continue with the game/ 

loading 

The easiest way to defeat the KEYDISK 
check is to change byte $12F from BNE (Branch 
Not Equal) to a BRA (BRanch Always). This 
way the bad block check is always skipped and 
the programs continues loading. To make a 
deprotected backup of The Three Stooges: 

1. Make copies of both game disks. 

2. Make the follow edits to a COPY of disk one 
only. 

Blk Byte From To 

$13 $12F D0 3B 80 3B 

3. Write the block back to the copy of disk one. 

Optional: Upload the program to your hard 
disk as per manual. Go save the orphanage! 

Quick and dirty ProDOS 16 
READBLOCK patch 

Some ProDOS 16 (and GS/OS) based pro- 
grams use a bad block check for the copy protec- 
tion. Programs that use a simple and direct read 
block call (22 A8 00 El 22 00) can be bypassed 
with very little effort. While working with The 
Three Stooges (Cinema\yare) I came up with the 
following little trick: A simple "universal" patch 
for the ProDOS 16 read block command would 
be to change the: 22 A8 00 El 22 00 to A9 27 00 
38 8004 

This translates into: 
153:A9 2700 LDA #0027 En'or code value for I/O 

(read) error 
1 56 :38 SEC The carry m ust also be 

set for an error 
157:80 04 BRA 15D(+04) Branch over the 

ProDOS 1 6 parm 

pointer 

The above code emulates the conditions re- 
turned from a failed ProDOS 16 read block call. 
This is done by loading the value of #0027 which 
is the error code for an I/O error and setting the 
Carry bit which is also used to determine if an 
error occiared. The final command (the BRA 
-1-04) simply skips over the pointer to the memory 
location of the data needed for ProDOS 16 call. 
When the following code checks the carry flag it 
will assume there was an error of some sort. Even 
if the code checks to make sure the error was an 
I/O (read) error, the 0027 in the accumlator will 
fool that routine into continuing. 

The only problem you might possibly run into 
using this trick, would be if the command number 
(the 0022) is changed in memory. Then the BRA 
-1-04 will be overwritten and when the code is run 
you will have an unpredictable result (most likely 
a system crash). There are a few programs that 
use a single routine to make all ProDOS 1 6 calls, 
when this is done the programs modifies the 
command number and parm location pointer. As 
always there are no 100% guarantees that the 
"universal" patch will work, but it's worth try! 

The lastnote: Most programs that use asimple 
ProDOS read block also use GET_DEVICE (22 
A8 00 El 20) or GET_LAST_DEVICE (22 A8 
00 El 21). If you let that call be completed the 



program will ask for the master disk if you are 
running it from a hard drive. The Get Device call 
looks for the disk called "disk name" (what ever 
is in the parameters) and returns the device number 
(what drive the disk is motinted on) to the code. 
Then this value is loaded from the Get Device 
parm table and use^ in the Read Block call. 

This might help when you want to quickly 
bypass a bad block check CP routine. 

Help with Copy Deprotection 

I would like to get in touch with people who 
have the following APPLE programs to krack 
them for you. I do not want to trade programs, just 
help you make deprotected backups of those you 
already own. Letters can be sent to: 

Brian A. Troha 

P.O. Box 196 

Stoughton, WI 53589-0196 

Programs I would help with are: Tunnels of 
Armagedon, National Inspirer, Talking Text 
Writer GS, Volcanoes v 1 .8, War in Middle Earth, 
Word Attack Plus GS and Mavis Beacon Teaches 
Typing with version numbers higher then 1.5 
(versions 1 .2 & 1 .5 have already been softkeyed). 

Anyone with the following ajjple format 
programs I would love to see (I never heard of 
them being released yet): Alcon, Bad Street 
Brawler, Gladiator, Operation Wolf, Rastan, 
S.D.I, and or Sky Shark. 



Zorro 



FL 



Bitkey for... 

Strike Fleet 
Electronic Arts 

Requirements: 

EDD IV Plus 

Many people have been groaning over this 
almost imcrackable program for some time. 
Fortunately, there are two ways to make abackup; 
if you have E.D.D. IV Plus, you can easily make 
a good, reliable copy using the BIT COPY op- 
tion. Another way is to use Blain Johnson's 
Deathlord softkey in COMPUTIST #62. This 
excellent softkey can convert Strike Fleet's weird 
format into a normal DOS format; however, the 
sector edits for Deathlord are untraceable in 
Strike Fleet, and thus it cannot be completely 
deprotected until Blain provides some info on 
exactly what bytes to change. I susp)ect this same 
protection scheme is used on Chuck Yeager's 
AFT, Wasteland, and other newer Electronic 
Arts releases. Hopefully, someone will fmd the 
right bytes and send in the answer, but imtil 
then... 

Also, if someone can fmd the time, itmight be 
worthwhile to investigate how games and cam- 
paigns are saved by Strike Fleet. As they are in a 
normal format, it might be advantageous to try 
and make an APT program to do all sorts of 
things, like maybe increase the range of your 
Tomahawk missiles, create a scenario with your 
one ship against about fifty, etc... (They do get b 

r i n g after a while, you know). I'd suggest using 
a blank, formatted disk to save an exjjerimental 
game on; that way the saved code can be seen 
without interference from other programs on 
disk. 

To the RDEXed: I have a suggestion which 
I'd really like you and the readers to consider. 
Several past issues of COMPUTIST have con- 
tained many large, helpful articles on deprotec- 
tion basics, APT's, etc. for beginners. Rather 
than printing separate articles, however, why not 
have some major contributors, like Brian A. 
Troha or Phil Goetz, or a group of contributors, 
like "The Hardcore Computists" produce a single 
issue dedicated exclusively to beginners? Now, 
I'm not talking aboiit an issue which is sent to 
everybody, but rather one like the back issues, 
which may be ordered at will; and, perhaps you 
could append this beginner's issue every six 
months to a year or so to keep up with the times? 

1 think this would be a good source of revenue as 
well, since there will always be begiimers out 
there, as I once was and still am in some ways. In 
addition, I believe such an amalgamation of 
expertise crammed into one humongous issue 
would prove as invaluable to us Apple owners as 
Beneath Apple DOS/ProDOS, Apple Tech- 
manuals, and COMPUTIST itself. 

To the RDEX subscribers: In COMPUTIST 
#68, The Executioner jwovided an address for 
some fairly cheap 3.5" disks. I've found some 
that are even cheaper. Write to this address for a 
catalog: 

Computer Direct Inc. 
22292 N. Pepper Road 
Barrington, IL 60010 

From this particular company, 3.5" micro- 
disks are a paltry $0.59 each in lots of 10. They 
guarantee a jiretty high clip rate, and I've ordered 
5.25" disks from them before with no hassles. 

The best price on 800K 3.5" disks that I 
know of is $0.39 each in lots of 25 from: 

MEI/ Micro Center 
1100 Steelwood Rd. 
Columbus OH 43212 
1 (800) 634-3478 
RDEXed 

Also, I've got a public domain word proces- 
sor which saves all files in the form of ftoDOS 
text files. Since some people have been having 
trouble with getting their articles in text files, you 
can just save your writing to disk, and use Copy 
n Plus to convert it to DOS 3.3, and then send it 
to COMPUTIST. Incidentally, the program is 
called FrEdwriter (Free Educational writer). To 



get a copy, send a 5.25" disk along with proper 
postage through the RDEX-ed, and he can relay 
your inquiry to me. 

To Vasant Javasankar: If you have access 
to it, try using E.D.D. IV Plus to copy Wasteland. 
It worked for Strike Fleet, and I'll bet it works for 
Wasteland too. If you or any other readers don't 
have E.D.D. IV Plus, and are desperate for a 
working copy of either Wasteland, Strike Fleet, 
or any other programs with EA's new protection, 
write me through the RDEXed, and we can 
arrange something. 

To Eric R. Mayou : You said in COMPUTIST 
#69 that you had some trouble getting into the 
monitor with your ROM card in slot 4. Did you 
remember to flip the switch m the rear of the 
card? On all Integer BASIC ROM cards, that 
switch activates the card, and when Ctrl-Reset is 
pressed, control is transferred to thecard's ROM. 



England 



Peter Green 

The following softkeys are mainly the result 
of studying previous softkeys published in 
Computist — and in the case of one, as men- 
tioned later, luck played a large part! As I am not 
an assembly language 'expert' I regret that I 
caimot give detailed information about the de- 
protection! 

In each case, the requirements are a disk 
copier and a sector editor. 

Softkey for... 

Great Western Shootout 
Brittanica Software 

This disk has a bad block as indicated when 
copying the original with Copyll-i-. Previous 
softkeys in Computist have indicated the rele- 
vant call used by ProDOS to read a block and this 
information together with the monitor search 
routine enabled me to find the protection code. 

1 . Copy the original disk using a disk copier that 
will ignore bad blocks. (CopyII+, Diversi- 
Copy, etc.) 

?.. With a block editor, search for 20 IC OE and 
change the 20 to 60. On my copy this was 
found at Block $596 Byte S08D. 

Softkey (ot... 

The Duel - Test Drive 11 
Accolade 

The disk was deprotected after studying pre- 
vious softkeys for Accolade software and uses a 
very similar routine. Trial & error foimd the 
correct alteration! 

1 . Copy the original disk using a disk copier that 
will ignore bad blocks. 

2. With theblock editor, changeBlock$16EByte 
$134 from A2 20 to 80 38 



Blk 

16E 



Bvte 
134 



From 
A2 20 



8038 



Softkey for... 

Jack Nickalaus' 

Greatest 18 Holes Or Major 

Championship Golf 

Accolade 

This disk is not copy protected but uses a 
password protection - you have to identify a 
particular hole from a 'cdutse sheet' which is 
printed on very dark paper airtfl is virtilally tin- 
readable! This is the disk in Which luck played a 
great part! I managed to find part of the protec- 
tion routine and intended to substitute a 60 (RTS) 
at a particular byte. I accidentally put it at the 
wrong byte and was amazed to find that it did the 
trick. 

1 . Copy the original disk 

2. Using your sector editor and scan the disk for 
$F4 BD 8D 22 15 2A and change the 22 to 60 
— on my disk at Block 8C Byte 022 

Note: After using this softkey, you MAY find 
that, when asked to select a course, you have to 
enter it twice. 



The Terminator 



IL 



Softkey for... 

Test Drive II: The Duel (gs) 
Accolade 

This game is protected with yet another ver- 
sion of the famous 3.5" disk nibblecount. After 
working on de-protecting the He 1 28K version of 
this game, I was expecting a little more of a 
challenge than this. 

This is what I found on Block $16E, at byte 
$128: 



PHP 


;Save some registers 


REP #30 




PHY 




PHB 




PHK 


;make data bank/program bank 


PLB 


the same 


STZ C597 


;zero return value 


SEP #30 


;swi1eh to 8-bit registers 


LDX #20 


Itrack 20,slde 1 


LDY #01 




JSR C540 


;do the check 


STX C597 


;store return value 


STY C598 




REP #30 


iback to 16-bit mode 


LDA C597 


;look at return value 


CMP #206C 


;lessthan206C? 


BCC FAIL 


lifyes, goto lail" exit 


CMP #2102 


;greater than 2102? 


BCS FAIL 


;if yes, go to lair exit 



COMPUT1STJ73 



(leaders Data ixcliange 



15 



FAIL 



SEP #30 
LDX #21 
LDY #01 
JSR C540 
STX C597 
STY C598 
REP #30 
LDA C597 
CMP #1DB0 
BCC FAIL 
CMP #1E78 
BCS FAIL 
REP #30 
PLB 
PLY 
PLP 
RTL 

REP #30 
LDA #D000 
STA 0235AB 
PLB 
PLY 
PLP 
RTL 



;now check track 21 , side 1 
(pretty much same as above) 



;if track 21 is bad, fall 

:lf ok, restore registers from stack 

and make a clean return 



:lt's"D"dayforyou! 
;store at pass/bll flag... 
;restore registers and return. 



It appears that the check routine will store a 
SDOOO iif the disk is a copy, but it will not store 
anything if the disk is an original. Solution: NOP 
out the offending "LDA #D000" and the "STA 
0235AB". 

1 . Using your favorite sector editor, load in block 
$16E, and at byte $176 put 7 SEA's. 

Optional: use your handy sector editor to 
embed snappy comments where various text 
messages are stored. I found them around Blocks 
$140-5160. 

In an attempt to increase modularity of cars 
and scenery. Accolade has sacrificed speed by 
scattering a host of data files all over the disk. As 
with most Ilgs ]>rograms of this type, the disk arm 
makes a regular rhythm going back and forth 
between almost 800K of data, often taking as 
long as 10 seconds just to load in a minuscule 10 
or 20 block file. Also, now that I have softkeyed 
this game, I would like to load it onto my 1 -meg 
RAM card. It only requires 512K, but it 
CRASHES with a "memory fragmented" error 
whenever the RAM card is activated in the con- 
trol panel. The game also hard-codes addresses 
in banks 2 and 3, so GS/OS caiuiot be used. The 
program also shuts down access to the Control 
Panel/Desk Accessory menu, so you have to 
reboot and wait another 5 minutes or so for the 
game to load in if you accidentally leave the 
system speed on "Normal" or leave Keyboard 
buffering ON when you want to "drive" with the 
numeric keypad. (I jsersonally prefer to use the 
keypad instead of the joystick, because I find that 
its easier to control.) 

The 1 28K version of this game on a 5 .25 " disk 
is also protected. The disk can be read with Copy 
n Plus's sector editor, when it is set to DOS 3.3 
PATCHED mode. Track $21 has a load of errors 
on it, though. The protection (probably a track 
synchronization, maybe even half-tracks) only 
checks side 1 at bootup time. Side 2 can be 
COPYAed if you do a POKE 47426,24. 

Using the "Visit Monitor" CDA on my Ilgs, 
I was able to capture aU of bank 0/1 memory after 
a successful disk check and save it to disk. Now 
whenever I want to play the game, I restore all of 
the memory, insert my bit-copy of the original 
and pick up from there. If you itiink. this is a half- 
backwards way of getting around the protection, 
you are right. If I had more time on my hands I 
would try to do an actual softkey, but for now, 
this works for me. 

MONRWTS A ReadAVrite disk routine 

I have written something for all the lazier 
hackers out there — the sector editor for people 
who hate sector editors. First, type in the hexdump 
at the end of this article. Next, BS AVE it to your 
DOS 3.3 utility disk(s). When you BRUN this 
file, you will have anew set of disk commands at 
your disposal, attached to the Ctrl Y vector in the 
Monitor. 

The syntax is: CTKS.ADDR Ctrl Y (return) 

C = Command (8=Write,0=Read) 
TK= Track (two digits) 
S= Sector (one digit) 
ADDR Address (256 byte block to read/write) 

For example, 1 10.2000 Ctrl Y will read track 
$11, sector $0 into memory at address $2000. 
8001 .B700 Ctrl Y will write page $B7 to disk at 
track $00, sector $1. Your command will be 
confirmed by a quick message and RWTS return 
code. E.G. when you type: 

004F.1 300 Ctrl Y 

MONRWTS responds with: 

T04 SOF A1300 R 
RC=00 

As you can see, this little utility can be VERY 
useful for quick editing of a disk, protected or 
otherwise. It is very convenient on a Ilgs where 
the Monitor has a built-in HexAext dump, search 
command, etc. 

One day if I am suf^ciently bored I will write 
a ProDOS version which will read/write blocks. 



MONRWTS.OBJ 



0300: 
0308: 
0310: 
0318: 
6320: 
5(5328: 
0330: 
0338: 
0340: 
0348: 



A9 OD 8D 
FA 03 4C 
29 OF 8D 
EB B7 68 
EC B7 A2 
01 E8 8E 
OA OA 29 
EC B7 A5 
3F 8D Fl 
FD AD EC 



F9 03 
BF 9D 
ED B7 
4A 4A 
01 18 
F4 B7 
FO OD 
3E 8D 
B7 A9 
B7 20 



A9 03 8D 
A5 3C 48 
29 00 8D 
4A 4A 8D 
26 3D 90 
A5 3D OA 
EC B7 8D 
FO B7 A5 
D4 20 ED 
DA FD 20 



$9E35 
$EAF4 
$D532 
$9A56 
$797F 
$9E0B 
$1321 
$4CD2 
$CA7C 
$EC6E 



0358: 


ED B7 20 DA FD 20 95 03 


$8A73 


0360: 


A9 CI 20 ED FD AD Tl B7 


$3025 


0368: 


20 DA FD AD FO B7 20 DA 


$2A3F 


0370: 


FD 20 95 03 AE F4 B7 CA 


$3F6A 


0378: 


BD 9A 03 20 ED FD 20 E3 


$E241 


0380: 


03 20 B5 B7 A2 03 BD 9C 


$38C2 


0388: 


03 20 ED FD CA 10 F7 AD 


$2D55 


0390: 


F5 B7 4C DA FD A9 AO 4C 


$1D6D 


0398: 


ED FD D2 D7 BD C3 D2 8D 


$D31B 


Here is the source code in DOS 3.3 Merlin 


format 







* MONRWTS 

* Adds RWTS functkans to Monitor 

* Syntax:CTKS.ADDR«Y 

* C = command (8=W.0=R) 

* TK - track (two digits) 

* S - sector (one digit) 

* ADDR - address to R/W 

* by The Terminator 
*v1.0-24/Dec/89 



ORG $0300 



RESET 
USRADR = 
TSZP 

ADDRZP = 
GOUT 
RWTS 

PREPRWTS = 
PRBYTE 
lOBSECT = 
lOBTRK 
lOBCMD 
lOBBUFF = 
lOBVOL 
lOBRETN = 



$9DBF 

$03F9 

$3C 

$3E 

$FDED 

$B7B5 

$03E3 

$FDDA 

$B7ED 

$B7E0 

$B7F4 

$B7F0 

$B7EB 

$B7F5 

#<START 

USRADR 

#>START 

USRADR+1 

RESET 



START 



LDA 
STA 
LDA 
STA 
JMP 

LDA TSZP 

PHA 

AND #$0F 

STA lOBSECT 

AND #$00 

STA lOBVOL 

PLA 

LSR 

LSR 

LSR 

LSR 

STA lOBTRK 

LDX #$01 

CLC 

ROL TSZP+1 

BCC READ 

INX 



READ 



PRRC 



STX 

LDA 

ASL 

ASL 

ASL 

AND 

ORA 

STA 

LDA 

STA 

LDA 

STA 

LDA 

JSR 

LDA 

JSR 

JSR 

LDA 

JSR 

LDA 

JSR 

JSR 

LDA 

JSR 

LDA 

JSR 

LDA 

JSR 

JSR 

LDX 

DEX 

LDA 

JSR 

JSR 

JSR 

LDX 

LDA 
JSR 
DEX 
BPL 
LDA 
JMP 



lOBCMD 
TSZP+1 



#$F0 

lOBTRK 

lOBTRK 

ADDRZP 

lOBBUFF 

ADDRZP+1 

IOBBUFF+1 

#T" 

COUT 

lOBTRK 

PRBYTE 

PRSPC 

#"S" 

COUT 

lOBSECT 

PRBYTE 

PRSPC 

#"A'' 

COUT 

IOBBUFF+1 

PRBYTE 

lOBBUFF 

PRBYTE 

PRSPC 

lOBCMD 

ISRW.X 

COUT 

PREPRWTS 

RWTS 

#$03 

RCMSG.X 
COUT 

PRRC 

lOBRETN 

PRBYTE 



(error code) PRSPC 

ISRW 
RCMSG 



LDA #$A0 
JMP COUT 

DFB "R","W" 

ASC "-CR" 
DFB $8D 



Playing Tip for.. 



Zork Zero 



0350: 95 03 A9 D3 20 ED FD AD $0AC3 



infocom 

(These tips supplement the on-line hints built 
into the game. If you do what the on-line hints 
suggest, you should be able to solve the game 
pretty easily. My tips will merely cut down on the 
frustration of losing progress due to simple mis- 
takes.) 

Although the on-line hints are helpful, they 
are vague and can sometimes mess you up. This 
game involves solving a "pyramid" of puzzles. 



leading up to the grand finale of stopping the 
curse. You often need something "from another 
part of the game" to solve the various puzzles. 
There is a logical order to everything, so try not 
to go insane running around making sure you 
have done everything correctly. 

Before you do anything, get your permanent 
light source. Then, go to the village and get your 
pigeon and perch. Collect all of the items from 
the village area and return to the castle. Drop 
everything. Go to Dimwitt's magic clothes closet 
and get the magic cloak. Use the magic cloak (as 
I will explain later) to store every last object you 
fmd. 

Work on one area of the game at a time. Solve 
ALL of the puzzles. After you have raided the 
castle. Activate the Oracle (as explained in the 
on-line hints) and begin work "beyond" the or- 
acle. 

To find your way around the delta, drop the 
three Orbs thatweren'tused in Zilbeetha'spuzzle. 
You don't need the remaining three Orbs for 
anything. 

Carry these four things around with you at all 
times: the pigeon, the candle, the magic cloak, 
and the brass lantern — once you have gotten it 
from the pits . A major problem with this game is 
figuring out where to put everything you fmd, 
since you cannot carry everything around with 
you all of the time. As you have probably discov- 
ered already, when you wear the cloak you go to 
the Plain. As you probably may have not discov- 
ered, you can drop objects in the plain, remove 
the cloak, and wear the cloak whenever you need 
to retrieve an object. (This is ideal for hiding the 
lantern from the giant crow in the Aerie.) 

If you are hke me, you may have gotten a 
"second-hand" copy of this game. In that case, 
some of the package may be missing. You may 
not have the valuable calendar, parchment, or 
map which comes with Zork 2^o. If you are one 
of those people, you will need to know that the 
blue toad's name is Otto, Frank LloydFlathead's 
relocated office in on the 19th floor south, and 
three undertrumps after an opponent's discard of 
a trebled fromp is an indefensible gambit. Next, 
draw yourself an 8x8 matrix, resembling a chess- 
board. Number each square from to 63, starting 
in the upper left comer, working across. What 
you have just drawn is a map of the construction 
site. The hardhat (which you need to enter the 
granola mine in antharia) is in lot 0. You will 
enter the site at lot 47, which is 2 lots up from the 
lower right comer, (be sure you are canying the 
FroBozz magic passages) Starting in lot 47, Go 
SW,SE,W,W,N,NE,N. You now should be in lot 
38. Install the NW/SE passage in the NW wall. 
Go NW,NE,NE. You are now in lot 1 5 . Install the 
N/S passage in the N wall. Go N,W,SW,SW 
,SW,W,NW. You now should be in lot 17. Fol- 
low the on-line hints from here on out. 

A technical hint: replace Infocom' s armoy ing 
modified ftoDOS with a standard ProDOS 
Kemal. Since it is not copy-protected, you might 
want to copy all of the files to a single 3.5" disk 
and use Diversi-Cache if you have a Ilgs. 



Joe Trodello 



MA 



Softkey for... 

The Children's Writing and Publishing 
Center 
The Learning Company. 
Requirements: 
Original disk 
DOS 3.3 system disk 
3 blank sides 
COPYA 

This was a very easy program to copy, fortu- 
nately. My first attempt, which was to use Copy 
n Plus's autocopy, was unsuccessful. Since this 
failed, I decided to try COPYA ignoring epilog 
and checksum errors. It worked! This is neces- 
sary only on the program disk. All other disks are 
unprotected and can be copied with any disk copy 
program. 

My version of the program was 1.1 on the 
program disk, and v. 1 .0 on the picture and stor- 
age disks. The manual was dated 1 1/88. 

1. Boot your DOS 3.3 system disk. 

2. Tell DOS to ignore checksum and epilog 
enors, and use COPYA to copy the program 
disk. 

POKE 47426,24 
RUN COPYA 

3. Copy the picture and storage disks. 



MD 



Rob Ftduccia 

I am a proud new owner of an Apple Ilgs this 
Christmas, and have some questions that have 
risen from getting it I hope RDEXed can help or 
you the readers. 

® I have a question on the Ilgs 's capability to 
change the text, background and border colors. It 
is very simple from the Control Panel, but how 
about from a Applesoft BASIC program in Pro- 
DOS and/or DOS 3.3? I feel being able to alter 
these colors would be a new flexibility when I 
program. I have heard it is a few pokes, but don't 
know off hand what these pokes are. Can some- 
one help me? 

® Is there a way in Visit Monitor from the 
Control Panel to search for a string or a hex 
string? For example, if I want to find the bytes 
$00 $67 and $B1 and don't want to look at each 
and every byte in memory from $0000 through 
$FFFF, how could I do it? If there is a search 
command, how do I use it, exactly? 



Deathlord Scenario Problem from 
COMPUTlST#62 

® I was trying to crack DEATHLORD from 
ECA, but had no luck on my own. I looked 
through my odd issues of COMPUTIST, I found 
one in COMPUTIST #62 by Blain Johnson on 
page 11 and 12. 1 typed in all the programs and 
hex dumps and made sure they were all typed in 
correctly. After copying the BOOT disk, I made 
the sector edits, which worked fine. Now comes 
the problem. When coping the SCENARIO disks 
A and B, and then booting up the game, and when 
the game asked for the SCENARIO disk, I in- 
serted it and it doesn't accept it. I did it two more 
times but it still didn't work. So I tried to depro- 
tectmy protected SCENARIOS with the control- 
ler. But when the game asked for the SCENARIO 
disk, the message just flashed and asked again. 
What is wrong? I have to know? Has this hap- 
jjened to anyone else? HELP!! 

To Zorro: Thanks for writing regarding my 
questions on Ultima V. 

Ultima IV HELP 

To Joey Johnson: You asked (COMPUTIST 
#69) some questions relating to Ultima IV. From 
reading it, I knew the answer right away. To 
obtain the SKULL of Mondain, you must first 
have a ship. A sextant (item D at a guild) will help 
greatly, but that is up to you. Then sail to the 
volcano's lava that has surfaced from the evil 
from the skull. The latitude is P'F" and the 
longitude is M 'F". The sextant isn't hard to learn, 
if you know what latitude and longitude are. 
When you are at the correct location, wait there 
for two new moons (you won't see anything but 
black where the moons are shown). Then 
SEARCH anytime while the moons are new to 
get the SKULL. 

Now what you what to do with the skull is up 
to you, in a way. To win the game, you must 
destroy it. To destroy the skull, stand on top of the 
Staggering Abyss on USE it. I'll let you find the 
Abyss. 

You also asked about the stones. To under- 
stand the stones, you must first understand the 
virtues before you can REALLY USE them. 
Stones have color. These colors represent a vir- 
tue of the Avatar. They rest in the dungeons in 
Britannia on altars. Simply have a suitable party 
(if you are not cheating) and a good handful of 
gems, 99 will do, if you have the gold. Then enter 
a dungeon. Go through the ENTIRE dungeon 
and peer with a gem to find the altar. Once you 
find the altar, go right on top of it and SEARCH. 
You will then be shown what stone color you've 
found, if there is a stone on it. 

The stones have restricted purposes. So you 
can't USE them whenever you like. The stones 
are a huge part of the quest, and I feel if I tell you 
anymore it'll bore thegame for you. But I will tell 
you this. You'll need the stones to make the 3 
PART KEY to enter the Codex. 

And what are the fountains in the dungeons ' 
for, you ask. Partly in the line of decoration, or 
maybe just spunk. To see what a fountain does, 
you must SEARCH on it. There are four types of 
fountains in the game. "Poison", "BAD taste!", 
"Hmmmm", and "AHH refreshing". The "poi- 
son" fountain gets you poisoned, the "BAD taste! " 
fountain takes some hit points away, the 
"Hmmmm" fountain does nothing at all and the 
"AHH refreshing" fountain heals all wounds. Do 
remember that ONLY the drinker will be af- 
fected. 

Hope I've answered the questions you asked 
about. If you really need more help, I suggest you 
order COMPUTIST #58. It has a superb indepth 
guide on Ultima IV by Jason Cobb. 

To Jonathan Trappe: In COMPUTIST #69, 

you gave some notes on Ultima V to Brandon 
LaCava; page 9. You said, "what Badge?", "I 
went through the whole game without finding it". 
I feel sorry for you. The badge isn't a necessity, 
but a great luxury. You use the badge in 
Blackthorn's castle to make the guards think you 
are one of them, or on their side. Exploring the 
dark paths of Blackthorn's palace may be quite 
hazardous to the health of one who is not in- 
stantly recognizable as a member of the Oppres- 
sion. Elistaria of Windemere (at latitude A'l" and 
longitude P'l") will give you a Black Badge 
which, when worn, will save you from the scru- 
tiny of Lord Blackthorn's foul guards. Be fore- 
warned, though: she will require much of you for 
this favor, perhaps even thy virtue. 



Marc Batchelor 
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Softkey for... 

Charlie Brown's ABC's 



Requirements: 

A method to get into the monitor 

Demuffin Plus 

Blank Disk 

Fast DOS (I used Pronto DOS) 

Sector Editor (Optional) 

I was given this program to de-protect a few 
weeks ago by a teacher friend of mine. It really 
wasn't that difficult to de-protect, but I ran into 
problems on it's title screen. The p»rogram reads 
the registered owners name from Track 1. Since 
I was using Pronto DOS, the title screen had 
garbage where the name should have been. At 
first I thought that this might be OK. I rapidly 
changed my mind, and I'll explain how I took 
care of this after we crack the disk. 

1. Format a disk using a fast DOS. 
INIT HELLO 
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2. Boot the disk, and when you see the Applesoft 
prompt "]", enter the monitor. 

3. Move RWTS to a safe place. 
2800<B800.BFFFM 

4. Boot your disk with Demuffin Plus and load it 
in. 

BLOAO DEMUFFIN PLUS,A$S03 

5. Enter the monitor and disable DOS. 
CALL-151 

FF59G 

6. Move the altered DOS back into place. 
B800<2800.2FFFM 

7. Start Demuffin Plus. 
803G 

8. Copy all files to your freshly formatted disk. 

You will now have a disk that functions, but 
it will have garbage on the screen instead of the 
registered owners name. Our next task is to take 
care of this problem. 

Sector Editor Method 

1 . Scan the disk (Cracked Copy) for the follow- 
ing HEX bytes: 20 02 09 AD 72 AA 8D 7 A 10 
AD 73 AA 8D 7B 10 

2. At address $04, NOP to $0E. 

EA EA EA EA EA EA EA EA EA EA EA 

3. At address $3C, change to: 20 28 09 

4. Write the sector back out to the disk. 

5. Scan the disk (Cracked Copy) for the follow- 
ing HEX bytes: 4C Al 08 BD AE 09 8D IB 09 
BDB8 09 

6. At address $29, type the following HEX bytes: 
A2 00 BD 37 09 9D 00 02 C9 00 FO 26 E8 DO F3 

7. At address $38, type in the full registered 
owners name. The name must be terminated 
with a HEX $00. Thus, if I were to use my 
name, it would look like: Marc D. BatchelorOO 

8. If the name does not extend to address $5B, 
NOP up to and including $5 A. 

9. At $5B, type in the following HEX bytes: 
A9 00 85 48 60 

10. Write the sector out to the disk. 

File Method 

1. Boot your DOS disk, and BLOAD the file 
STEX on the ABC's disk. 

BLOAD STEX 

2. Type the following: 
803:EA N 804<803.80DM 
83B:20 28 09 

928 :A2 00 BD 37 09 9D 00 02 C9 00 FO 26 E8 DO 
F3 

3. Figure the HEX equivalent of the owners 
Name, and type in those HEX bytes, starting at 
address $937. 

4. Type in the following: 
A9,00 85 48 60 

5. Find the BLOAD length. 

AA60.AA61 returns with addr: Hi Lo 

6. BSAVE the file back onto the disk. 
BSAVE STEX,A$803,L$LLHH 

That should do it for this one. 



Softkey for.. 



Operation Frog 
Scholastic 



Requirements: 

A way into the monitor 

Blank Disk 

Demuffin Plus 

Fast DOS (NOT Pronto DOS) 

I went into fits over this program and Pronto 
DOS (PDOS). I assumed that PDOS looked just 
like DOS 3.3 to programs, but was much faster. 
I am certain that PEXDS is not at fault in the 
matter. Scholastic uses non-standard routines to 
access the file manager, and I believe that is the 
root of the problem. For a fast DOS, I used the fast 
load enhancement by Thomas N. Burt, published 
in Nibble's "More Apple Secrets". This is appar- 
ently more transparent to programs than PDOS. 

1 . Initialize a disk with a fast IX)S. 

2. Boot Operation Frog, and when the prompt "] " 
appears, break into the monitor. 

3. Move RWTS to a safe location. 
2800<B800.BFFFM 

4. Boot disk containing Demuffin Plus. 

5. BLOAD Demuffin plus. 
BLOAD DEMUFFIN PLUS,A$803 

6. Disable DOS, and move Operation Frog's 
RWTS into place. 

FF59G 
B800<2800.2FFFM 

7. Startup Demuffin Plus and copy all files. 
803G 

Softkey for... 

Study Skills 
Self Exploration 

Requirements: 

A way to get into the monitor 

Demuffin Plus 

Blank Disk 

Fast DOS (Pronto DOS) 

1. Initialize disk with a fast DOS. 

2. Boot Study Skills and when the prompt "]" 
appears, break into the monitor. 

3. Move RWTS to a safe location. 
2800<B800.BFFFM 

4. Boot up disk with Demuffin Plus, and load the 
program. 



BLOAD DEMUFFIN PLUS,A$803 

5. Disable DOS 3.3, and move Study Skills 
RWTS in place. 

FF59G 
B800<2800.2FFFM 

6. Startup Demuffin Plus and copy all files. 
803G 



Softkey for... 



Chem Lab 



Requirements: 

File Copier (I Used Copy ][+) 
Disk Copier (I Used Copy ][-i-) 
Fast DOS (Not Pronto DOS) 

These disks are COPYA-able, but the result- 
ing copies will not boot. I first formatted a disk 
under F*ronto-DOS and copied all files from the 
original side A to the formatted side A. Booting 
this copy resulted in a crash. I tried to trace the 
code and spwnt about a day on it before deciding 
to try another fast DOS. I used the fast load 
enhancement by Thomas N. Burt, published in 
Nibble's "More Apple Secrets". This worked 
wonderfully, leaving a fully deprotected pro- 
gram. If you don't have the aforementioned book, 
I recommend it as well as the other two in the 
same series. 

1 . Format both sides of a Blank disk with the DOS 
of your choice (Not Pronto DOS). 

2. Copy files from side A of the original to side A 
of your formatted disk. 

3. Copy side B of the original to side B of the 
formatted disk using whole disk copier. 

Softkey for... 
The Design Your Own Home Series 
Avant-Garde 

Requirements: 

A way into the monitor 
Demuffin Plus 
Blank Disks 
Fast DOS (Pronto-DOS) 

The three Design Your Own Home (DYOH) 
programs covered here are: Architectural De- 
sign, Interior Design, and Landscape Design 
(Arch, Int, Land respectively for short). TTie 
RWTS on all three disks is identical. But just 
capturing the RWTS and Deniuffining the files 
over is not all that is required to crack these disks. 
On all disks, line of the HELLO program sets 
the run flag (214) to 214 (POKE 214,214) and 
messes with the reset vector. Also, in each of the 
main program files, there are two CALLs to 
RWTS that must be disabled. The first CALL is 
to 47721 ($BA69), and the other is to 47741 
($B A7D). The CALLs are ALWAYS located on 
lines 21000 and 20000 respectively. Examining 
the code at $BA69 shows: 



BA6g:A9AB 


LDA #$AB Set up to read 


BA6B:8D4BB8 


STA $B84B Original disk wi«) 


BA6E:A9 FF 


LDA #$FF altered marks and 


BA70:20DFBC 


JSR $BCDF translation tables. 


BA7320ECBC 


JSR $BCEC 


BA76:A9AA 


LDA #$AA 


BA78:8D29BA 


STA $BA29 


BATBfiO 


RTS 


BA7C:60 


RTS 



BA7D:A9FF LDA #$FF Set up to read 

BA7F:8D4BB8 STA $B84B standard format 

BA82:A9DE LDA #$DE for data disks. 

BA84:20DFBC JSR $BCDF 

BA87:A9AA IDA #$AA 

BA89:20ECBC JSR $BCEC 

BA8C:A9g6 LDA #$96 

BAeE:8D29BA STA $BA29 

BA91.-60 RTS 

Since we have installed our own DOS, we 
can't have the program calling these locations, 

1 . Initialize the front and backof a blank disk (one 
for each module) preferably with a fast DOS. 

INIT HELLO 
DELETE HELLO 

2. Boot one of the protected modules, and when 
you see the picture, drop into the monitor. 

3. Move the RWTS to safety. 
2800<B800.BFFFM 

4. Boot your disk that contains Demuffin Plus 
and BLOAD it. 

6 Ctrl P 

BLOAD DEMUFFIN PLUS 

5. Enter the monitor and disable DOS. 
CALL-161 Yes. I do mean CALL-161 

6. Move RWTS into place. 
B8OO<280O.2FFFM 

7. Run Demuffin Plus and Copy all files, front 
and back. 

803G 

8. Repeaf step 7 for each module that you have. 

9. Boot a fresh DOS. It is time to make some 
necessary modifications to the programs. 

10a. On all disks and all sides, LOAD HELLO 

and make the following change: 
HOME:GOTO 5 

10b. SAVE HELLO back to disk. 

Repeatstep 10a and 10b for each side of every 
module. 

1 1 . Make the following changes to the following 

files: 

Disk: Architectural Design 

Program name Line# Remove 

ARCH.DESIGN.P 20000 CALL 47741 
21000 CALL 47721 



Disk: Landscape Design 

Program name Line# Remove 

DECl 20000 CALL 47741 

21000 CALL 47721 

DEC2 20000 CALL 47741 

21000 CALL 47721 

DEC3 20000 CALL 47741 

21000 CALL 47721 

DEC4 20000 CALL 47741 

21000 CALL 47721 

HPDRAW 20000 CALL 47741 

21000 CALL 47721 

Disk: Interior Design 

Program name Line# Remove 

DECl 20000 CALL 47741 

21000 CALL 47721 

DEC2 20000 CALL 47741 

21000 CALL 47721 

DEC3 20000 CALL 47741 

21000 CALL 47721 

DEC4 20000 CALL 47741 

21000 CALL 47721 

Remember, these modifications are to be made 
to both sides of the disk. 
That's all folks. 



Ed Croft 



IL 



Notes on Disk Muncher 

I read in issue #70 about the questions con- 
cerning the Disk Mimcher copier. I went through 
my doc disks and found this info. I don't know if 
the BBS number at the end of the file is good or 
not since my modem is down, but dialing for the 
number I've gotten a busy signal (which is usu- 
ally a good sign). 

/ N 

Disk Muncher 1.1 

The ultimate in fast copiers 

Written by 

The Suck 

Documentation by: 

The Inspector 

Another Great jwogram brought to you by 

Corrupt Computing 

If you have any questions, comments, or 
concerns, please direct them to either The In- 
spector or The Stack on "The Corrupt Com- 
munications Bulletin Board". 313-453-9183 
- 24hrs. 
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Mike Patemo 

I wish to voice my no copy p)rotection speech 
again. I didn't go out and sp)end $1000.00+ for a 
hard drive so I would have a thousand "KEY" 
disks cluttering up the desk. "Hmmmmm where 
did I put that d*@#$m key disk last" 

The two programs "MECC World Geograph" 
and "MECC U.S . A Geograph" are "excellent GS 
programs", and I wouldn't hesitate to give them 
a grade of " A+". 

I give most of the credit for the following 
softkeys to DonMcClelland; because withouthis 
help neither of the softkeys would be pmssible. 

Softkey for... 

World Geograph vl.l 
MECC 

Using Copy n Plus v9 make a copy of World 
Geogrjq)h using the 3.5" parameters included on 
the disk (World Geograph HD); it copies fine, but 
doesn'tremove the key disk call. Using the sec tor 
editor make the following edits. Block 0067 
search for 18 60 38 60; change 38 to 18. Block 
0068 search for 18 60 38 60; change 38 to 18. 1 
don't believe you need to change both sets of 
bytes, but not being sure which, I changed both. 
Write the changes back to the disk. 

Run the program before you attempt to make 
a copy, so it will write the correct data back to B Ik 
008; then enjoy. On a Hard Drive and system 
5.02 this program flies. 

Softkey for... 

U.S.A. Geograph vl.O 
MECC 

Using Finder from system 5.02, copy the 
program file "USA.Geograph" to a freshly for- 
matted 3.5" disk. Using the Copy II sector editor 
make the following edit; Block 0083, search for 
1 8 60 38 60; change 38 to 1 8 and write the change 
back to disk (don't forget to hit return). Copy the 
rest of the files to a new disk, and it is done. 

Run the program before you attempt to make 
a copy, again so it will write the correct data back 
to BLK 0008. Voila, it is fini. 

Neither information disk is copy protected. I 
haven't checked all the features, but I susp>ect the 
softkey's will work. 
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The Mailman 

This is my first contribution to Computist. 
I've found Computist to be informative in many 
ways — a big help to a person in computing for 
less than 2 years. 

Softkey for... 

Jack Nickolas Greatest.lS Holes of Golf 
Accolade 

Requirements: 

Whole disk copier 

block editor (I used Copy 11 Plus) 

Make a backup of JNG. Scan the backup for 
the code FO 04 22 B A 03 00 AD B2. 1 found mine 
on Block ($0092), byte 07F. Change the FO to 80 
and 22 to AF. Write it back to the disk. Now you 



can "throw away" (store it with your original) 
and play the game without having to typje in a 
course number from the deep maroon sheet and 
ruining your eyesight in the process. 

Softkey for... 

Battle Chess 
Interplay 
Requirements: 

Whole disk copier 
block editor 

Same tyjje of jwotection as Jack Nickolas 
Golf in thatyou need to tyjje in achess move from 
the manual. (A particular move from a certain 
game and notation.) 

Scan the disk for 80 OC C2 30 C6 OC FO 03 4C 
24 AB 4C 76 3D. Mine was on Block $0419 byte 
16A. Change all of the code to EA's except the 
C2 30 C6 OC. Write it back to thedisk. Now when 
the pn-ogram asks for the inpmt of chess mo ve, just 
press return and enjoy an unustial game of chess. 

Softkey for... 

Stickybear Shapes GS 
Optimum Resources 

Requirements: 

Sector copy 
block editor 

Sector copy the original disk, recopying any 
tracks with errors. Scan the disk for 22 A8 00 El 
20 00 OA 2F. Change 22 to 38, A8 to 60, and El 
to 00. Mine was atBlock$0100. byte lEl. Write 
it back to the disk. 

Softkey for... 

Stickybear Opposites GS 
Optimum Resources 
Requirements: 

Sector cojjier 
block editor 

Sector copy the original disk, recopying any 
tracks with errors. Scan the disk for 22 A8 00 El 
20 00 57 3A. Change 22 to 38, A8 to 60, and El 
to 00. Mine was atBlock $0106, byte 16E. Write 
it back to the disk. 

©I'm looking for an APT for Silpheed. I've 
only been to the end of level 10 and there's 10 
more after that. Any suggestions? 

Comments: Copy 11 Pius 9.0 

This upxlate to my workhorse program has 
some new and interesting features. One of my 
favorites is the ability to compare files between 
identical (or depvotected disks) to see if there are 
any differences. Also in the update is the ability 
to launch another program, run it, and return to 
Copy n Plus. I don't know if it works with DOS 
3 .3 disks (probably not), but the program MUST 
be able to quit to ProDOS (Binary files don't 
work - at least none of mine have). Selection can 
now be with a mouse, or a pjress of a designated 
key, or for you die-hards, the arrow keys still 
work. Parameter lists for 5.25" disks are split into 
2 separate files which require some juggling of 
filenames in order to read all of them (a program 
selector can solve that real quick, i.e. Bird's 
Better Bye). Few new parameters have been 
added for 3.5" disks. If you don't have this 
program, get it. If you do, call for the upgrade. It's 
well worth the money. You do need l^K mini- 
mum and 80-coluiim ability (also a mouse if you 
want mouse control) for the program to run. A 
round of applause for the gang at Central Point. 
Note: It will not work with a Uni-Disk drive. 
Central Point maintains a bulletin board for pjara- 
meters. New files and requests are accepted and 
current parameters (new) can be downloaded. 
Call (503) 690-6650. 



Dr Crack 



France 



Softkey for... 

Think Quick vl.2 
The Learning Company 

When I got my first issue of Computist (#67, 
thanks to your ad in Nibble), I read it and saw that 
some people cracked some games for the first 
time so I said to myself why not me? 

So I tried to crack Think Quick, I first did a 
sector copy: it didn't boot. I then tried a bitcopy 
with Copy n+ 8.4: it didn't work either. I then 
nibble edited the original and I noticed that some 
bytes were always the same, they where just 
before D5 AA 96 so I guess they weren't copied 
by the copy program. I then searched through the 
disk, knowing that no pirologs, epilogs or check- 
sums had been changed, for 8C CO. I found them 
in a lot of places but two only were interesting: 
track $03 sector $00 and track $0B sector $05. 1 
noticed that the program was searching on the 
disk, in those two places, for some of the bytes I 
had seen previously. I guess that's what you call 
a signature check. So I put an RTS at the begin- 
ning of the routines and booted. It would boot 
fine until the title screen then it would clear the 
screen, write "OOPS! Fh-oblem ..." and continue 
the boot process until it did it again and the menu 
would by displayed. I thought that those little 
annoying problems could be bypassed. So I 
searched for the message, foimd it and disas- 
sembled near it and there it was: the code would 
put zero in location $2000-$5FFF(Hires 1 and 2) 
and jump to asubroutine, so I justputNOPs in the 
clear screen routine and the JSR, making an 
educated guess that that routine was the one that 
would print the message. A few lines later the 
program would wait for a keypress a do an 
indirect jump through $FFFC, to reboot, so I just 
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put an RTS after die JSR I had noped. I then 
continued the search for the message, I found a 
similar routine and did about the same thing as in 
the other one. I booted the game and.. . It worked. 

The castle creator is on the other side of the 
disk so since this side boots too I said to myself 
maybe the protection scheme is there to so I went 
on the same tracks & sectors and I found the same 
code so I just did tfie same sector edits as before 
and it worked! 

This disk is ProDOS based and is RDOS 
(funny I thought RDOS was more or less DOS 
3.3 and from S.S.I!) 



m Sa Mi Em 


IQ 


2 F DB-F3 ???? 


EA 


3 1C 20?? 


EAEAEA 


2D ?? 


60 


96 ?? 


60 


B 5 04 A9568508 


BD 88 CO 60 


B 6 4F-64 ???? 


EA 


6A 20???? 


EAEAEA 


A1 ?? 


60 


Playing Tip for... 




ULTIMA V 




Origin Systems 




Passwords 




Oppression: IMPERA 




Resistance: DAWN 





Keeps 

Stonegate: Shadowlords' fortress, south of 
Lost Hop)e Bay. 
Ararot: It's a keep in the underworld 
where a captain lives. He will 
tell you how the Shadowlords 
were created. 
Bordermarch: In the mountain on the island 
north of Jelhom. They're allies 
Stone keep: East of Jelhom. 
Empath Abbey: Keep of Love. That is where the 

eternal flame of Love is 
The Ly ceaum: Keep of Truth. Eternal flame of 

Truth 
Serpent's Hold: Keep ofCourage. Eternal flame 
of Courage 

Name of Shadowlords 

Falsehood: FAULINEI 
Cowardice: NOSFENTOR 
Hatred: ASTAROTH 



Shrine of 
Compassion 
Justice 
Spirituality 
Honor 
Sacrifice 
Valor 
Humility 
:iHBljes-ty.';:;u. 



Mantras 

Mantra 
MU 
BEH 
OM 
SUMM 
CAH 
RA 
LUM 
• AHM. V.V 



Town 

Britain 

Yew 

Skara Brae 

Trinsic 

Minoc 

Jelhom 

New Magincia 

Mc)<»aglQ.w 



^ Entrfejs to the underworld 

•Fall in one of the whirlpools and you will be 
in a cave near Destard, I think. 
•Go down one dungeon. 
•Go down the falls east of Spiritwoods. 

Crown Jewels 

Crown: It's at the top of Blackthorn's castle 
Amulet Retrace the itinerary made by 

British 's expedition 
Scepter: It's in the Shadowlords' keep 

Potions 

Yellow: heal 

Green: Poison. DO NOT DRINK FT 

red: poison cure 

black: invisibility 

blue: sleep. DO NOT DRINK rr 

white: X-rays 

purple: I thiiik it changes you into a giant rat 

Words of power 
Deceit: FALLAX 
Despise: NILIS 
Destard: INOPAI 
Wrong: MALUM 
Shame: INFAMA 
Hythloth: IGNAVUS 

Doom: VERAMOCOR 
Covetus: I never fotmd it. To get the shard I 
went down by Wrong. 

Note on Doom: This dungeon is in the under- 
world, in the ethereal plane, you will need the 
amulet to find it, it's in the middle of the black 
plane. If you find a room with a mirror you've 
finished the game because if you go near the 
mirror you will be absorbed and ... Well, you'U 
see. 

Magic 

While playing the game I discovered 3 other 
spells. 

AN YLEM (Garlic and Blood Moss), 1st 
circle: Makes things disaptpear 

IN XEN MANI (Ginseng, Garlic, Mandrake): 
2nd circle: Gives you food 
REL XEN BET (Sulfur Ash, Nightshade, 
Mandrake): 6th circle: Changes foes into giant 
rats 

Shards 

Cowardice: At the bottom of Hytholth, on the 
isle of the avatar. 

Falsehood: To find it go down the dungeon 
Deceit then go southwest through mountains 
then southwest in grass. At a major intersec- 
tion go Northwest then Northeast then west 
then southwest on rocky hills then Northwest. 
Go then over a lake and there upon an isle is 
the shard of Cowardice. 

Hatred: Go down Covetus 



Miscellaneous 

To play the harpsichord, sit on the chair in 
front of it and push the numbered keys on your 
keyboard. 

An armorer makes "Skull keys" that make it 
possible to open magically locked doors. He will 
hide 3 each day, at noon, in the tree in the North- 
West comer of the town where he lives (I think 
it's Mrnbc). 

You can find the glass sword in the east end of 
serpent's spine, BE CAREFUL FOR YOU CAN 
ONLY USE rr ONCE. 

If you put a coin in the well of Paws and wish 
for a FERRARI you will get a horse for free. 

If you search during daylight at the place 
where a moongate is at night you will find stone. 
It's called a moonstone, if you put it somewhere 
a moongate will app^di there at night. 

Smith the talking horse is in the bushes near 
lolo' s hut (to fiiKi him first enter the hut picture). 

There' s a magic carpet at the entrance to Lord 
British's room. You can board it and go over 
water. 

The mystic arms and at the bottom of Hyth- 
loth. 

"Legend tells of a spot in the Bloody Plains 
forever damp from the blood of many battles. 
Mandrake can be found there or in the fens-of-the 
dead. Deadly nightshade can only be found in the 
most thickly forested spot of Spiritwood. Both 
may only be collected in the darkness of mid- 
night." 

Bitkey for... 

Where in the USA is Carmen Sandiego 
Broderbund 

I did not developed this bitcopy; it comes 
from Central Point Software and is to be used 
with Copy n-i-. I'm sending it bei luse in issue 
#67 someone presented a bitcopy for this game 
using quarter-tracks, but this one doesn't. 

Front 

TO, B3=01, 45=01, 46=5F 
T1-T22, 0E=9A, 0F=D5, 10=9D, 0A=03, 
B4=D4, BD=01, 45=00, 46=03 

Back 

T0-T22, B3=01, 0E=9A, 0F=D5, 10=9D, 
0A=03, B4=D4, BD=01, 45=00, 46=03 

Explanation - 

TO: copy track 

B3=01: 1 don't know 

45=01 and 46=5F: cut.high and cut.low: 
number of bytes to cut from track start 

T1-T22: copy tracks 1 through $22 

OE, OF and 10 : address prologs 

0A=03: number of bytes to match with ad- 
dress start table when finding track start by header 

B4 and BD : I don't know 

45=00: cuLhigh 



NH 



Jim Ross 

Bitkey for... 

Dungeon Master 

FTL 

Requirements: 

Apple Ilgs 
Copy n+ V9.0 

This disk only has one error in it on block 17 . 
Copyll-H sector editor would read the block when 
patched to ignore data checksum. This also re- 
vealed that the 12 Macintosh Tag Bytes (nor- 
mally all zeros for IIGS) had values. Block DC on 
the disk does a GS/OS Dread on block 17 and 
looks for a 27 error code in the accumulator or it 
gives a Dungeon Master error. This can be by- 
passed by changing byte 83 from 00 to 27 (LDA 
00 00 to LDA 00 27) but the resulting disk 
crashed with fatal errors. 

It turns out that block 17 contains valid data 
that the program reads like a Macintosh block by 
using smartport calls. These calls are 20 OD C5 
(JSR C50D). A call is first made to reset the read 
hook and substitute the programs own read rou- 
tine, then a smartport call to read Block 17 is 
made and the resulting data loaded into memory 
at 16/BFAA. This is done in repeating loops by 
the code in Block 106 which loads in memory at 
01/1F6B. This code is called twice by memory 
locations 04^380 and 01/1063 during the load 
program process. This whole process is very 
complex and many reads from the 1 6/BFAA area 
are made into the program. To fix all these reads 
and make a true softkey is beyond my ability. 

Copy n+ V9.0 will make a working backup of 
the program by sector copying the disk then bit 
copying track O answering no to both sync and 
nibble count. Be sure to verify the disk after 
copying to make sure the only error is on Block 
17. This copy will run but will ask you to insert 
the original disk when you try to save a game. 

Block 1 04 contains the code which checks for 
an original disk when you try to save. This code 
loads in memory from 01/1B85 to 01/1C94. 
After looking at this code it became apparent it 
also uses smartport calls to read Block 17 in a 
special way. Looking at Block 17 using copy \\+ 
nibble editor, a large number of bytes in the data 
were in inverse, indicating bytes with more than 
8 bits. This code first reads Block 17 and verifies 
that the Tag bytes are not zero, then it reads Block 
1 7 twice more using different read routines and it 
expects to find some bytes different. If the two 
reads are identical (as our copy will be), it fails by 
setting the carry and the program asks for the 
original disk. TTie pertinent code is in memory 
from 01/1C4F to 01/1C94. The code is as fol- 
lows: 



1C4F:20951C 


JSR 1095 


1C52:E220 


SEP #20 


1C54:A902 


IDA #02 


1C56:8D021D 


STA 1D02 


1C59:C220 


REP #20 


1C5B:18 


OLC 


1C5C:7B 


TOO 


1050.-690600 


ADO #000B 


1C60:20 951C 


JSR 1095 


1C63:A721 


LDA [21] 


1C65:F02A 


BEQ 1091 (+2A) 


1C67:A727 


LDA [27] 


1C69:F026 


BEG 1091 (+26) 


1C6B:A0B002 


LDY #02B0 


1C6E:A20000 


LDX #0000 


1C71:B721 


LDA [21],Y 


1073:5727 


EOR [27],Y 


1075:8525 


STA 25 


1077:29 E4E4 


AND #E4E4 


1C7A:D015 


BNE 1091 (+15) 


1C7CJ\525 


LDA 25 


1C7E:291B1B 


AND #1B1B 


1C81.F001 


BEQ 1084 (+01) 


1C83:E8 


INX 


1084:88 


DEY 


1085:88 


DEY 


1086:10 E9 


BPL 1071 (-17) 


1O88:E000 00 


OPX #0000 


1C8B:F004 


BEG 1091 (+M) 


108D:18 


CLC 


1C8E:AB 


PLB 


1C8F:2B 


PLD 


1C90.6B 


RTL 


1091:38 


SEC 


1C92.AB 


PLB 


1C93:2B 


PLD 


1094:6B 


RTL 



I tried changing the set carry at01/lC91 from 
38 to 18 (clear carry) and the program bombed. I 
found that changing any byte in this code caused 
the program to bomb. There must be a checksum 
somewhere for this code. Rather than find it, I 
swapped the 38 (set carry ) at 1 /I C9 1 with the 1 8 
(clear carry) at 01/1C8D and the program ran. 
This is done on disk by changing Block 1 04 Byte 
111 from 18 to 38 and Byte 114 from 38 to 18. 

Step by Step 

1. Manual sector copy the disk 

2. Manual bit copy Track with sides :02 sync:N 
Keep:N (note I used copy 11+ V9.0, my V8.4 
would not work) 

3. Verify the copy to insure only one error on the 
disk (block 17). Bit copy Track until you get 
only one error. 

4. Sector edit block 104 



31k 


Byte 


From 


To 


104 


111 


18 


38 


104 


114 


38 


18 



Note: Copy 11+ V9.0 has parameters for 
Dungeon Master that bit coj)ies Tracks 0,21 and 
22. TTjere is no reason to bit copy Tracks 21 and 
22. Tliis will make a working back up. My Block 
104 sector edits allow you to save games. 



Randy Flood 
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Softkey for... 

Bad Dudes 
Platoon 

Data East 

1. Copy the disk with a standard disk copy 
program. (I used Copy II+.) 

2. Sector Edit the copy. 

Ids Sfil fi^ From la 

05 OE 4W0 66EA90ABF EAEAEAEAEA 

I figured this out by examining the parameter 
file for Platoon on Copy II+v9.0. 1 can't figure 
out what needs to be changed in order to gain 
unlimited lives though. 

® I ask that someone who is adept at remov- 
ing copy protection, or programming in assem- 
bly language write to me. I am interested in 
buying a modem, and an NMI card, so anyone 
who could suggest good brands should also write 
to me at: 

1730 Ash Street 

North Bend, OR 97459 

SkvPhantom CT 

After reading Computist #68, 1 felt I should 
write to Computist to respond to a few fellow 
Computists and to deliver some more softkeys. 
First of all, I would like to thank Dan Halfwit for 
his "King of Chicago" softkey. I had been work- 
ing on kracking that program for quite some time 
with little success. 

To Dr. Hackenbush: In Wizardry V, the 
Laughing Kettle is, indeed, in the northeast cor- 
ner of the first level. Have you made a map of the 
level yet? If not, it will be quite difficult to 
explain where it is exactly (it is in the middle of 
nowhere). I will try anyway. Let's start in the 
room where the Orb of Llylgamyn was found. 
Follow these directions: Exit the room, then 
travellElNlElNlE2NlE2N2W3SlW5N 
2E 2N 3W 2N IE. Here, (I)nspect for a secret 
door. You should find one. Go through the door 
and travel straight. You should find the kettle 
there! By the way , the kettle is not really essential 
to the game. He just offers various advice (for a 
fee, of course). 

Adventure Maps 

I thought this would be a good time to bring 
something up. Being an avid adventurer, I have 
mapped many games, including the dungeons of 



the Bard's Tale series and Wizardry V. After 
mapping them on graph paper, I used SuperPainl 
on my MAC SE to produce top-quality maps. 
Anyone interested in maps for Bard's Tale IE or 
Wizardry V (up to level 3) just send me a self- 
addressed stam(>ed envelope and the game and 
level you desire. On these maps I have also 
recorded any special words or items that come up 
on the particular level. I have also come up with 
the sector-editing scheme for "enhancing" your 
characters' abilities in Wizardry V. Addition- 
ally, I have been able to determine the password 
that is required to enter the maze simply by 
jumping into the monitor at the prompt and 
displaying memory locations S6E0O-6E5O via a 
"6E00.6E50". The first four capital letters in a 
row should be the password. Hopefully, I will 
soon come up with a softkey to eliminate the 
entire routine. 

How about sending us copies ofyour- 
maps on a MAC disk so we can print them ? 
Unless you think that may be too much of a 
giveaway. RDEXed 

Softkey for... 

Pool of Radiance (lie) 

Strategic Simulations 

Requirements: 

64K Apple He/IIc/IIgs 
5 1/4" disk copier (I used Copy 11 Plus) 
5 1/4" sector editor (1 used Copy 11 Plus) 
8 blank disk sides 

Pool of Radiance is a fairly new game created 
by a joint effort of SSI and TSI, the people of 
Dungeons and Dragons fame. The game itself is 
good, but the boot up process is a pain. The user 
must insert various disks as the boot progresses. 
After all this, he must use an indecipherable code 
wheel to determine a password. In Computist 
#68, Ashish Morzaria (to whom I must give some 
credit) gave a method to "trick" the password 
protection by substituting a personalized pass- 
word for each of the normal ones. I decided to 
eliminate the entire routine outright. I found the 
area in memory where the passwords were lo- 
cated and traced the code backwards. Eventually, 
I found the following code in memory and 
searched for it on the disk. I found this on side 1, 
starting on track $11, sector $05: 

0F0:20FA7D JSR 7DFA 

0F3:A9 03 LDA #03 

0F5:8D12 67 STA 6712 

0F8:A902 LDA #02 

0FA:8DFC40 STA 40FC 

0FD;201B96 JSR 961 B 

100:A9 82 LDA #82 



set up password routine 
the password routine 
continue loading 



I simply eliminated the jump to the password 
routine by replacing the $20 IB 96 at $FD with 
$EA EA EA. 

1. Copy the disks with any 5 1/4" disk copier, 
ignoring any errors. 

2. Make the following sector edits to side 1 : 

li Ssl S^ Emm la 

11 05 FD-F 201B96 EAEAEA ' 

3. Be sure to write the edits back to the disk! 

Softkey for... 

Curse of the Azure Bonds (lie) 

Strategic Simulations 

Requirements: 

64K Apple He/IIc/IIgs 
5 1/4" disk copier (I used Copy 11 Plus) 
5 1/4" sector editor (I used Copy 11 Plus) 
7 blank disk sides 

Curse of the Azure Bonds is the second in- 
stallment of the Dungeons and Dragons series. 
The boot up process has been improved some- 
what over that of Pool of Radiance. No longer is 
the user required to insert various disk sides. 
There still remains, however, a password check. 
I checked memory for a routine that resembled 
that of Pool of Radiance. I found that the new 
routine was not in the same location. A few 
memory locations had been altered and the start- 
ing address had been changed, but most of the 
routine remained the same. I simply replaced the 
jump to the password routine with three more 
SEA'S. 

1. Copy the disks with any 5 1/4" disk copier, 
ignoring any errors. 

2. Make the following sector edits to side 1 : 

Ids Sfil Byla From l2 

$13 $0F $01-03 20BA96 EAEAEA 

3. Be sure to write the edits back to the disk! 

Ilgs Softkey for... 

Bubble Ghost 
Accolade 

Requirements: 

512KApplengs 

3 1/2" disk copier (I used Copy II Plus) 
3 1/2" disk editor (I used Copy 11 Plus) 
1 blank disk 

This is a neat little program where a ghost 
must "blow" a bubble across various levels of 
play. The only problem is that before you can 
play, a certain level is displayed on the screen and 
you must look up which level it is on a piece of 

black-on-red paper. This is a pain in the 

(fill in the blank). 

Rather than go blind from the absurd color 
combination of the cheat sheet, I set out to elimi- 
nate the routine. What I did was assume there was 
simply a jump to this check subroutine from the 
main program. I followed the main program. 
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Readers Data Exchange 



COMPUTIST #73 



inserting a break point (00) at every jump. Even- 
tually, I found the jump for which I was looking. 
The code on the disk contained zeros for the 
values to which the program jumps, but in memory 
the zeros were filled with legal values. Here is the 
code on the disk: 



193:80 00 00 

19622000000 

19A:22 00 00 00 

19E:AD0000 

1A1:48 

1A2:22 00 00 00 

1A6:7A 

1A73C0O0O 

1AA:7B 

1AB:18 



STA 0000 
JSL 000000 
JSL 000000 
LDA 0000 
PHA 



JSL 
PLY 
STZ 
TDC 
CLC 



000000 



0000 



In the above code, the JSL at $1A2 is the 
"Jump to Subroutine Long" that must be nulli- 
fied. To do so, just simply replace the $22 with an 
$AF. This causes the program to do a harmless 
accumulator load. In a nutshell: 

1. Copy the disk with any 3 1/2" disk copier, 
ignoring any errors. 

2. Make the following sector edits to the disk: 
BUc Bxte From To 

$17C $1A2 22000000 AFOOOOOO 

3. Be sure to write the edits back to the disk! 

Ilgs Softkey for... 

Battle Chess 
Interplay 
Requirements: 

512KApplengs 

3 1/2" disk copier (I used Copy II Plus) 
3 1/2" disk editor (I used Copy 11 Plus) 
1 blank disk 

Battle Chess is a new game released by Inter- 
play (a subsidiary of Electronic Arts). Battle 
Chess adds an entirely new dimension to the 
gameof chess. When one piece captures another, 
they go through a "fight" and the winner sur- 
vives. The graphics are good, and the sound 
effects are nice. The only major problem with the 
game is that before the start of the game, the user 
must find a certain famous chess match in the 
manual and find a specific move that either white 
or black made. This move must be entered cor- 
rectly for the game to continue. 

To remove this protection scheme, I followed 
the main program, inserting breakpoints at every 
Jump to SubRoutine. I eventually found the code 
I was looking for on block $3D8: 

0F9:2090 35 JSR 3590 

0FC20E0 32 JSR 32E0 

0FF20DEAA JSR AADE 

102S0 RTS 

The Jump to Subroutine at $FF tumed out to 
be the culprit. I simply replaced the JSR with a 
harmless LDA and the game loaded and ran 
without having to look in the manual for the 
correct niove. & a riutkhell: ' 

1. Copy the disk with any 3 1/2" disk copier, 
ignoring any errors. 

2. Make the following sector edits to the disk: 

Blk Bae From To 

$3D8 $FF-101 20DEAA ADDEAA 

3. Be sure to write the edits back to the disk! 

Ilgs Softkey for... 

The Duel: Test Drive II 

Accolade 
Requirements: 

512K Apple Ilgs 

3 1/2" disk copier (I used Copy 11 Plus) 
3 1/2" disk editor (I used Copy 11 Plus) 
1 blank disk 

1. Copy the disk with any 3 1/2" disk copier, 
ignoring any errors. 

2. Make the following sector edits to the copy: 

Blk Byte Fiaiti To 

$169 $19B-19E 22 E3 04 03 AFE3C4 03 

S1F3-1F6 22E3C4 03 AFE3C4 03 

$191 $1D8-1DB 22E3C4 03 AFE3C4 03 

$199 $125-126 F0 16 8016 

3. Be sure to write the edits back ti) the disk! 

On a final note, I would liki to direct a 
comment to Charles Haight, the 1 person \vho 
seems to be trying his hardest to ke^ Compuiist 
going. Feel free to send me some flyers. I feel I 
can pass some out and get some feedback. Alio, 
I am fairly well-known on Americi Online (the 
new name for AppleLink now that Apple had 
abandoned it) and I can talk to the people who 
own the system and see what they think about 
Computist moving in. I believe we can opeiJ a 
"room" acoupleof times a week, and Cbmputists 
(or anyone else) can drop in and chat. Let tijie 
know what you think (readers?). 



Eliminate Power countdown 

Ilk Sfii fiyifi EcQm la 

$0D $00 $34-36 fiDE0 82 EAEAEA 

Instant destruction of enemy ships 

Ids Ssl fi^ From Iq 

$00 $09 $44 FO DO 

Unlimited power/instant refueling 

Ids Sd fiaa Emm la 

$00 $06 $28-29 00 20 EAEA 

Bomb power (for 1 hit to destroy) 

Ids Sal Biiia Emm la 

$00 $02 $BA 05 9A 

Advanced Playing Technique for... 
Mapple: 

9 

Unlimited lives 

Ids Sat Byia Froni la 



$0C $03 $79-7B CEE94C 



EAEAEA 



Bob Igo 



PA 



More API's: 

Advanced Playing Technique for... 
Captain Power 

9 

Ships 

Ids Sat Byis Eiam la 

$0D $07 $99 05 any 

$0E $0D $44 05 any 

Bombs 

Ids Sat fiylS From Iq 

$00 $06 $32 04 any 

$00 $07 $29 04 any 

COMPUTIST #73 



Advanced Playing Technique for.. 
Situation Critical: 



Starting level 

Ids Sat Byte From l2 

$17 $0C $18 00 level 

Number of levels advanced 

ids Sat fiyla From l2 

$17 $08 $A2 01 ?? 

Try changing the starting level to 10 and see 
that you were never meant to get that far on phase 
n. I don't know how high the other phases go. 
Also, the game will end after you go through 
phase II if you start on any level other than 0. The 
above edit changes the number being stored in 
location $6C. However, STBAD also holds the 
current level. I have tried changing both of them, 
but the storage to $6C seems to be the only thing 
which changes your starting level, and nothing I 
did stopped the GAME OVER message at the 
end of phase II. Perhaps I'll try searching for any 
reference which affects the number stored in S6C 
or $7B AD. If this works, it should be in the next 
issue of Computist. Try it yourself and see what 
happens: Using a sector editor, such as Copy \\+, 
search for $6C. Any time that number is found, 
disassemble, or (L)ist, the code before it to see if 
any modification to the number stored there is 
being made. If no modification is being made, 
keep trying the whole disk. I'd try references to 
$7B AD next, searching for the numbers, AD 7B . 
I'd be really suspicious if modifications were 
made to one of the two locations with a check to 
the other one, such as: 

INC $6C 

CMP $7BA0 

BNE ???? 



Of coiji;se, therg ai:e a nuiriba' of possibilities 
at this point. I won'^tlcnow exactly how it's being 
done until I look closer. As I said before, try this 
yourself, and if I can' t do it, please explain to me 
how you did. 

To anyone who can/wants to edit games, 

write tome, and we'll talk APT's. I have an editor 
disk which contains over 70 specific game-edit- 
ing programs for both old and new games. 

The ones which I have personally created 
over the years are: Saracen, Buck Rogers, I/O 
Silver, Conan (changes speed), Gemstone War- 
rior, Mine Sweep, Arkanoid, Xevious, Trolls and 
Tribulations, Microwave, Oil's Well, Pharoah's 
Revenge, Chrono Warrior, Anti Gravity, De- 
monic Decks, Pool of Radiance, Times of Lore, 
CafHain Power, Mapple, Situation Critical, and, 
of course, the one that got lost in the shuffle of 
other people's submissions. Bard's Tale in. It's 
constantly being updated and improved, so if you 
send me a blank disk, I'll fill it full of editing 
programs at no cost However, in return, I'd 
ajjpreciate the exchange of any game editing 
theory and techniques, because I am constantly 
learning new things, but there is still much more 
that is to be learned from others. Maybe there is 
another person out there who knows much more 
than I do about editing games. I am hoping he/she 
will be gracious enough to teach me all he/she 
knows about the subject. 

©Does anyone have a block read/write 
(stand-alone) program for ProDOS? If so, I'd 
appreciate the name and publisher of it because 
I'd like to be able to make //gs editors for 3.5" 
disks. 



Canada 



Jason Schaad 

To Henry Komhauser: (Computist#70, page 
18) I have the reason for your Laser drives not 
working. First of all the Laser drives are not 
compatible with the Apple Ilgs operating system, 
GS/OS. The reason for this is because there are 
no drivers for the Laser drives when you are 
booting the program. I phoned a Tech Support 
line in the States and they said and I quote, "The 
Laser drives are dumb, they don't recognize GS/ 
OS and some of ProDOS 16". 

Notes on War in Middle Earth 

I see that the game War in Middle Earth is on 
the most wanted list. I have an original and you 
can copy it with just about any copy program Q. 
used Diversi Key) but Copy \\+ 8.4 disk copy 
also works too. I don't thiric the game is even 
protected, and if it is it sure doesn't have a very 
good protection scheme. So if you're like me and 
hate to play on your originals you can now play 
on a fully functional back-up of War in Middle 
Earth. 



Notes on LaserForce 

Another game I found easy to copy is, Laser- 
Force by Britannica FanFare. All you have to do 
for this one is use Copy Yi+ 8.4 and use the bit 
copy, copy the whole disk, and you now have a 
fully functional back-up. 

I know that this ,s not how most of the games 
are copied but it 'works'. 

©What issue did Apple Ilgs Softkey 's first 
ajjpear in. 

® I have tried to find some good books about 
programming in 65C816 but have been unsuc- 
cessful. I was wondering if anyone could tell me 
of any good book and where to get it from. 

©Also could someone explain to me how 
you can make your own Super Hi-Res graphics, 
and how to use the Ensoniq speaker and the 15 
voices that the Apple Ilgs has. 



Dave Pritchard 



AZ 



©I've heard about Track Star, & Wildcards. 
I would like some more information on these. 
Can someone give me a simple explanation? 

©I have tried the fix for Superprint! as de- 
scribed in #70, page #13. My version came on 
5.25" disk. The program will copy as described, 
using Copy En-. However when I try to access the 
program with a block editor as described. I get a 
system lockup. HeeeellUlppp. I would like to be 
able to put this all on a 3 .5 " instead of the stack of 
5.25"s required. 



protection scheme expects to find in the memory 
locations where they are expected to be found. 
The end result is that the disk thinks it has found 
the electronic signature, when in fact it hasn't 
even gone to the disk to get it. 

As far as I know, this softkey works perfectly. 
I am still trying to solve the game, but as yet have 
not managed to do it. This, I think, is due to alack 
of time to practice playing rather than any error 
in the softkey. 

1. Use COPY II Plus, Disk Muncher, or some 
other copy program that can ignore errors (Or 
use COPYA after telling DOS to ignore check- 
sum and epilog errors:POKE 47426,24 : RUN 
COPYA) to make a copy of Impossible Mis- 
sion n. 

2. Sector edit the copy. 

Ids Sal Eida Eram la 

00 05 OE-30 A6 2BBO-89 A9FC85F0 

C0BD8EC0 A9EE85F1 

A98085FO A9EE85F2 

C6FOF07A A9FC85F3 

20A5BBB0 A9E785F4 

75 A5 F9 C9 A9 EE 85 F5 

0ADOF1AO A9FC85F6 

00BO8CC0 A9E785F7 

10FB88 4C7ABB 



GA 



James E. Bulman 

Some notes on RISK (Leisure Games) 

RISK by Liesure Games is an excellent re- 
creation of the famous board game. I was very 
pleased to receive it as a Christmas gift and 
quickly proceeded to my issues of COMPUTIST 
to find a softkey. I was disheartened to find it on 
the "Most Wanted" list. After several feeble 
attempts Ithoughtlhad cracked it. Unfortunately 
the crack is more elusive than I had hoped. So 
here is the Partial Softkey, maybe it will help 
someone else crack it: 

1. Boot your DOS 3.3 System Disk 
POKE 47426,24 

RUN COPYA 

2. Boot Copy VL+ (Version 8.3) 

3. Select Copy Files 

4. Copy the ProDOS file fiwm Copy II-H on to the 
COPY of RISK. 

The game will nm if, after copying, you 
immediately boot the disk with open-apple ctrl 
reset. If a "cold boot" is performed, the game 
begins to boot, a title screen appears, and the 
error message "Check DiskDrive"aH)ears. After 
that, the game will not boot by any means. 

Some notes on Copy II Plus v9 

I also have a helpful tip for anyone who has 
purchased Copy Il-h Version 9. This updated 
version contains information on both sides of the 
disk. Utilities on side one; Paims on side two. In 
an addendum. Central Point Software recom- 
mends copying sides one and two onto separate 
disks. Sounds like a good idea, but don't get too 
excited yet. Each time you need to access the 
Farms you must remove Disk 1 from Drive 1 and 
insert Disk 2. It will not access the Farms if they 
are in Drive 2! This isn't the worst of it. It seems 
that there are two sets of Parnis on, side two but 
the program will not access the second set. You 
have to go through a ten-step routine to rename 
ALL the files on side 2 EVERYTIME you want 
to gain access to the second set of Farms. You 
must then go through this ten-step routine 
BACKWARDS to gain access to the first set of 
Farms again. It doesn't take anuclear scientist to 
realize that this is a royal pain. 

Well, I quickly figured out a better method. 

1 . Copy Side 1 of COPY H-h onto one disk. Set 
this copy aside. 

2. CJopv Side 2 of COPY U+ onto Side 1 of a 
second disk. 

3. Copy Side 2 of COPY 11+ onto Side 2 of the 
second disk. Set your original COP Y 11+ aside. 

4. Delete the files PARM.DATA2 and 
PARM.KEY2 from Side 1 of the second disk. 

5. Delete the files P ARM.DATA and PARM.KE Y 
from Side 2 of the second disk. 

6. Rename PARM.DATA2 to PARM.DATA 
and PARM.KEY2 to PARM.KEYon Side 2 of 
the second disk. 

Now if the Farms you need are not on Side 1 
of the second disk, all you need to do is flip the 
disk and try again. Unfortunately you still can 
only use Drive 1 . T suspect we'll have to wait for 
Version 10 for that fix. 



Groucho Tarz 
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Softkey for... 

Impossible Mission II 
Epyx 

I would like to begin this joftkey by thanking 
all of those who contribute to Computist. This 
particular softkey owes a tremendous debt of 
gratitude to Jim S. Hart, whose work on other 
Epyx games led to this softkey for Impossible 
Mission II. 

Impossible Mission II uses Epyx's standard 
protection scheme, a signature check. This signa- 
ture is decoded by the software and is used as 
actual program code to load the rest of the game. 
What Ihis softkey does is place the bytes that the 
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Again, thanks to Jim S . Hart for his articles in 
Computist #57, #61, and #66. The "to" code 
above was written by Mr. Hart, and I was pleased 
to see it required only one byte of modification by 
me. 

© How about adding anew name to the listof 
wanted softkeys. Ijust purchased Tangled Tales, 
and have had no luck with it using previous 
softkeys by the same manufacturer. Even backup 
copies made with Essential Dau Duplicator 4 
Plus, version 4.8, do not work! One tough disk! 
Anyone else have a softkey. 

Senior PROM — NOT Available 

I am sorry to inform new readers, but I re- 
cently tried to purchase the Senior PROM from 
Cutting Edge Enterprises, as listed in the front of 
each Computist issue. They wrote back to inform 
n:e that they no longer sell the product, but 
continue to suRXJrt it to registered owners. This 
means that it is getting harder for us non-GS 
owners to visit the Monitor at will. 

<S>This is an urgent request to anyone out 
there who has made any modifications to the 
Apple lie (enhanced) ROMS. Please send me any 
informationonthe modifications you made, what 
they are for, why, etc. I plan to replace one of my 
ROMs with a modified ROM, using the new 
EPROM burner I bought, to enable me to reset 
into the monitor. So far I have only the vaguest 
notion what I want to do. While I'm at it, I'd like 
to fix any known bugs, etc., so your letters would 
be a huge help! Also, ^anyone knows if there is 
a "patch area" in the apple ROMS which could 
be used to store all or part of DOS 33, please 
describehowlicoulddothls. Ideally, I would like 
to be able to reset into fite-monitor^ as described 
above, then be able (for example) to issue a 
CALL xxxx conunand to have DOS "magically 
appear", so that I could write a captured RWTS 
to disk without booting a disk! Any info anyone 
has would be appreciated, and I will write an 
article on exactly what and how I did it once it 
works! 

Cheap NMI? 

I mana^ged to build a cheap NML Maybe 
you'll find it useful. I've found that it works in 
most cases, though sbtne programs can defeat it. 

Go to your local electronics supply house, 
such as Radio Shack. Buy a push-button (nor- 
mally open) momentary switch (this means that 
the switch only makes contact when the button is 
pressed). Also buy 'Telephone spade lugs (Radio 
Shack catalog number 64-3070) and a 100 Ohm 
Resistor (5% Tol., 1/2 watt works fine. Radio 
Shack catalog number 27 1 -01 2). Solder the parts 
in this order: 

Lug-Wire-Switch-Wire-Resistor-Wire-Lug 
Now, nm the switch out the back of your 
Apple. Plug one of the lugs into pin 26 (the upper 
left pin as you face the keyboard) and the other 
into pin 29 (just a couple of pins down from pin 
26, also on the left) of ANY unusedslot. If you've 
done this right, booting a reset-protected pro- 
gram should work as normally (i.e., it should 
boot and reset should still not work). However, 
pressing your new "cheap NMI" button will 
probably stop the program. I have found that it 
stops older Strategic Simulations RDOS disks, 
but does not stop Ultima V. In any event, for a 
total cost of imder $3.75 (estimated), it's not a 
bad little device. Of course, I assume no respon- 
sibility forfriedmotherboards,blownperipheral 
cards, etc.! Use the ir^ormation at your own risk! 

I would like to make this urgent plea to all 
Computist readers. SUPPORT COMPUTIST 
NOW!!! I have purchased many back issues in 
the last couple of months, written to all the Apple 
owners I can find, and joined the club Computist 
has formed. I strongly urge you to support them 
in every way, especially financially. It only costs 
a few cents to write to someone else and tell them 
about Computist and how it can help them. Back 
issues only cost a few dollars, and every one you 
ordermeans that many dollars longer we will still 
be able to receive new issues of Computist. I 
propose that all readers buy at least one back 
issue for each softkey they have ever used from 
Computist. If you have all the back issues, fine. 
Just get one new subscriber for each softkey 
you've ever used. If we even get close to meeting 
this goal, Computist will be with us forever. And 
I don't know about the rest of you, but I don't 
know what I'd do without it! 
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IBM Playing Tip for... 

MechWarrior 

Activision 

These steps are needed to meet the game's 
objective. This solution does not, however, help 
you in the final battle. That solution is left up to 
the player — fighting and defeating The Dark 
Wing. This may or may not be the only solution 
to the game. It certainly worked every time I 
tested it. 

Read reminder of mission after opening se- 
quence. 

Go into bar and order a drink. 

Barkeep says he doesn't know of any winged 
skull emblems. 

Order another drink. 

Barkeep suggests contacting Grig Griez about 
winged skull emblem. 

Enter 'Mech Complex 

Old timer talks about Helmar Valasek. 

Travel to any Kurita planet. 
Read news in Blazing Ace's. 
Report offers reward for Grig Griez - further 
details on Galedon V. 

Travel to Galedon V. 

Enter government buildings - officer says 
Griez found near Land's End. 

Travel to Land's End. 

Go into bar and order a drink. 

Barkeep says to come back tomorrow. 

Enter 'Mech Complex and sell your Jermer - 
why pay to carry it? 

Go into bar and order another drink - agent 
gives a location for Griez. 

Travel to Kurita planet that Griez's agent 
named. 

Accept Griez's mission - take package to 
Stiener planet of Dustball. 

Travel to Dustball. 

When agent attacks fight once then run. 

Agent talks of a dropship named Stone Ar- 
row. 

Go into bar and order a drink. 

Barkeep says to come back tomorrow - he'll 
know more about dropship then. 

Waste some time by going to Blazing Ace's 
and reading the news. 

Go into bar and order a drink. 

Barkeep talks about the jumpship's captain - 
he has a brother, Wendall. 

Barkeep names a Marik planet where Wen- 
dall is on garrison duty. 

Travel to the M arik planet named by barkeep. 

Enter 'Mech Complex. 

Wendall will name a Davion planet where 
brother has a woman friend. 

After leaving 'Mech Complex you will be 
attacked - don't fight, run. 

Travel to the Davion planet that Wendall 
named. 

Go into bar and order a drink - meet Kearney; 
he blames Black Widows. 

Leave bar and follow address Kearney gave. 

When you see assassin fight him. 

Read news in Blazing Ace's; - Jordan Rowe 
gives Black Widow Planet. 

Travel to planet named by Jordan Rowe. 

Go into the bar; challenge Natasha Kerensky 's 
story and meet Tasha. 

Read news in Blazing Ace's; Jordan Rowe 
says meet Kearney on Albiero. 

Travel to Albiero. 

Follow woman that you see. 

Trust Tasha - Kearney is not who he says he 



Read next messages carefully 
Dark Wing and Chalice is given. 



location of 



Advanced Tips 

Excess baggage 

Sell your Jenner at the begiiming of the game. 
It costs plenty to cart it around with you. When 
you finally obtain the location of the Dark Wing, 
you'll receive about 5,000,000 C-bills. This is 
more than enough to buy a much better 'Mech, 
like a Rifleman or a Marauder. 

Was that three or four characters? 

I wrote to Activision when I was unable to 
recruit a fourth member for my 'Mech lance. 
According to Activision the game requires 640K 
of memory but, if there are any TSR programs 
using memory only three characters are allowed. 
Things to watch out for are mouse drivers or disk 
caches. Nowhere is this mentioned in the docu- 
mentation - consider yourself warned! To cir- 
cumvent this problem, create a boot diskette that 
simply loads DOS. If you really want to be fancy, 
include a small batch file to load MechWarrior 
for you. 

To earn additional C-biiis 

If you travel to planet where you found Griez 
an old man will ask you to kill Griez; you should 
accept his offer. When you first see Griez wait. 
You will then be given another chance to kill him 
- attack then. You will receive a 200,000 C-bills 
reward for killing Griez. 

The famous travelling salesman maneuver 

Travel to the central planet in any sphere. Buy 
as many 'Mechs as youcan afford. Then travel to 
a planet on the outer rim {away from coreward) 
and sell all the 'Mechs you have. You should 
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realize a 10% to 15% profit from this activity, 
including transportation costs. If the planet you 
travel to does not want to buy 'Mechs simply 
travel to the next closest and try to sell the ' Mechs 
again. Repeat as necessary. 

They're not all the same 

Not all the Houses offer would-be mercenar- 
ies the same compensation when negotiating 
contracts. The Federated Suns are fairly free with 
C-bills and quite generous with salvage. The 
Lyran Commonwealth is very generous with 
cash but they will give little salvage to mercenar- 
ies. The Draconis Combine drives a hard bar- 
gain; don' t expect to get rich from them. The Free 
Worlds League offers average C-bills and sal- 
vage. The Capellan Confederation isn't a good 
place for mercenaries to hire on - they are re- 
ported to sometimes not pay! When bargaining 
for missions, try to get as much salvage and as 
many C-bills as possible. Set your target pay- 
ment high - only the Kurita get really upset when 
you ask for 2,000,000 C-bills to defend a factory 
against a couple of Shadow Hawks. The prepay- 
ment percentage is not important unless you have 
'Mechs that need to Be repaired right away. 

MechWarrior Authorization Codes: 

The below listed codes are needed to defeat 
the copy protection. The program will show a 
picture of a 'Mech and ask for a response to a 
coded phrase. All of the phrases are unique and 
there is no need to know the actual name of the 
'Mech shown. I have summarized them here 
because I don't like flipping through manuals 
just to defeat copy protection! 

LCT-IV Locust 

Whiskey Delta Tango Night Stalker 
Xray Zulu. Charlie Future Guard 

Foxtrot Echo Delta Red Dawn 

JR7-D Jenner 

Foxtrot Oscar Xray Duck Soup 

Sierra Echo Xray Dragon Tail 

Juliet Alpha Sierra Yellow Bird 

PXH-1 Phoenix Hawk 



Papa Foxtrot 
Echo Golf Alpha 
Victor Victor 



Tin Man 
Black Witch 
Red Arrow 



SHD-2H Shadow Hawk 

Lima Golf Slasher 

Romeo Alpha Zulu Glory Boy 

Foxtrot Alpha Delta Bad Dream 

RFL-3N RiHeman 
Charlie Charlie Black Jack 

Hotel Oscar Tango Red Lance 

Foxtrot Alpha Romeo Sakhara 

WHM-6R Warhammer 

Tango India November Grave Walker 
Papa Bravo Mad Dog 

Whiskey Alpha Romeo Silver Hawk 

MAD-3R Marauder 

Bravo Alpha Delta Renegade 

Mike Alpha Sierra Small Room 

Zulu Alpha Romeo Black Baron 

BLR-IG BattleMaster 



Charlie Alpha Tango 
Hotel Oscar Tango 
Bravo Alpha Bravo 

Playing Tip for... 



Snow Fire 
Screaming Eagle 
Grim Jim 



Mean Streets 
Access 

Mean Streets Code Words 

The below listed codes are needed to defeat 
the copy protection. I have summarized them to 
save honest users the hassle of searching through 
the manual to locate a word. Of course, no dis- 
honest users would make use of this information. 

Word 

going 

mean 

is 

realsound 

the 

before 

layer 

fog 

an 

streets 

fly 

data 

here 

have 

of 

visit 

down 

that 

find 

gun 

all 

you 

extra 

and 

keep 

log 



Pg Paragraph Word# 

05 Loading Instructions 3rd 

05 Loading Instructions 7th 

06 Realsound 2nd 

06 Realsound 1st 

07 Playing the Game 2nd 

07 Playing the Game 6th 

08 The Story 3rd 
08 The Story 6th 
14 Overview 4th 

14 Overview 2nd 

15 Where to Go 3rd 

15 Where to Go 7th 

16 Getting Started 1st 
16 Getting Started 6th 
19 Searching a Room 2nd 

19 Searching a Room 6th 

20 Write Down Clues 2nd 

20 Write Dovm Clues 4th 

21 Defend Yourself 3rd 

21 Defend Yourself 7th 

22 The Inventory System 4th 

22 The Inventory System 6th 

23 Bounty Hunting 4th 
23 Bounty Hunting 6th 
26 Playing Tips 1st 
26 Playing Tips 4th 



Mean Streets Destination Codes: 

The following codes can be entered into the 
navigational computer. 



Delores Lightbody 


4920 


Peter Dull 


4674 


Sandra Larsen 


4599 


Warehouse 


4675 


Carl Linsky's house 


4660 



ArtuTO V. Magidin Mexico 

EBM Playing Tip for... 

Pool of Radiance 
SSI 

This is a great game, although a complex one. 
Here is some help for the adventurer. 

Characters: Although any party should be 
able to succeed in the game, a balanced party will 
help you a lot. In a party you should have good 
fighters, a couple of magic-users, at least two 
characters able to throw clerical spells, and a 
character with thieving abilities. As this is more 
thansix characters, the allowed maximum, you'll 
need some multiple-class characters. These char- 
acters, although having the advantage of mul- 
tiple-class, have two serious drawbacks: 

1) Their experience points are divided be- 
tween all classes equally. For example: if you 
have a Fighter/Magic-user, in order to achieve 
the second level as a Fighter (which requires 
2001 experience points), you'll have to earn 
4002 EP, since half of them go to the magic -user 
points. 

2) Since they have to be demi-humans in 
order to be multiple-class characters, an upper 
limit (except for thieves) is given to their ad- 
vancement. 

Now, my personal favorites for a party are: a 
Human Fighter, a Human Cleric, a Human Magic- 
user, a Half-elvenMagic-user/Cleric, a Dwarven 
FighterAThief, and an Elven Fighter/Magic-user. 
You could also experiment with a single class 
thief. 

Sex and Alignment - If you are a AD&D vet- 
eran, you know alignment has to play a part in 
how you react to a given situation. This, how- 
ever, does not hold for Pool of Radiance. Both a 
completely Lawful Good party and a Chaotic 
Evil one will encounter the same monsters, go on 
the same missions, and may complete them the 
same way. If you want to play aproper alignment 
game, you could easily loose. For example, a 
Chaotic Evil fighter might be tempted to join the 
forces bent on Phlan's destruction. But if he does 
when offered, you will simply loose that charac- 
ter. Even clerical turning is not affected. An evil 
cleric, instead of destroying or turning undead, 
should control them. This is not the case, how- 
ever. So alignment should play no part on your 
actions. As for the sex of your character, I'm 
afraid male characters are the best choice. A 
female character gains no advantage, and her 
Strength score is limited. So male's the choice. 

Magic - There are few things in the game as 
annoying as when you cast a spell only to be 
forced to abort it because the range was too 
limited. The game manuals don't include arange 
or a duration table for spells. Fortunately, this 



seem to be the same as for normal AD&D rules. 
See table #1 for range, and duration of spells: 

All spells which have a radius of effect, ex- 
cept Stiiiking Cloud, will affect an area surround- 
ing the targeted square. The Stinking Cloud will 
form itself on the squares to the right, down and 
down to the right of the targeted square. 

Remember: A Lightning Bolt will rebound 
off walls to achieve it's length, but it will rebound 
towards the caster, and not at the natural angle. 

Backstabbing - One of the most powerful 
thieving skills is backstabbing. If a thief, wearing 
armor no heavier than leather, and attacks an 
enemy from behind, he'll have a bonus in the to- 
hit roll and do four times the damage. To ensure 
the thief will backstab in the game is, however, 
difficult, because of the automatic facing the 
monsters have. Therefore, you should have your 
thief Delay until the monster has attacked, then 
attack him with another character, and then, 
apjproaching from directly opposite from the 
direction the previous attack was made, attack 
with the thief. 

Monsters - Ever tried to cast a "Charm 
Monster" on a Skeleton, or a Sleep spell on a 
Troll, only to see it fail? 

Remember: Undead (Skeletons, zombies, 
vampires, etc.) are proof against charm spells, 
sleep spells, hold spells, and stinking cloud. 
Trolls are immune to charm, hold and sleep 
spells. Wyvems are not affected by Charm 
Monster. 

Trolls will raise from the dead if you wait too 
long after killing them. To prevent this, have a 
character standing in one of the squares where the 
troll was just before being killed. 

A wild boar will stand up after being killed for 
the first time, unless the damaged dropw him to 
below -10 HP. 

Now, some help with the game proper. 

Slums 

1 ) There is a secret Treasure Room in the NW 
corner of the block. 

2) TTie Goblin Armaster, and the ores to the 
north of the Gypsy woman have magical treas- 
ure. 

3) Search the room after killing the Hobgob- 
lins in the north. 

4) Search the Stable. 

5) Don't fight or ask more money for Ohio's 
potion. Just give it to him and he will give you a 
good reward. 

6) You need to clear 15 random encounters 
before clearing the block, beside all fixed en- 
counters. Fixed encounters happen always in the 
same place. 

7) You can rest in any room where you've 
defeated a fixed encounter, and anywhere once 
you've cleared the block. 





Table #1 - Magic Spells 


Spell Name 


Range 

First Level 


Duration 


Bless 


6 


6 rounds 


Burning Hands 


Touch 


Instant 


Cause Light Wounds 


Touch 


Instant 


Charm Person 


12 


Combat 


Cure Light Wounds 


Touch 


Instant 


Detect Magic (MU & Clerical) 





1 Turn (CI) 2 rounds/level 


Enlarge 


.5/level 


1 turn/level , "~ 


Friend 





1 to 4 plus 1 round/level 


Magic Missile 


6H-l/level 


Instant 


Protection from evil (MU & CI) 


Touch 


3 rounds/level (CI) 2 rounds/level (MU) 


Protection fi-om Good (MU & CI) 


Touch 


3 rounds/level (CI) 2 rounds/level (MU) 


Read Magic 





2 rounds/level 


Reduce 


.5/level 


Instant 


Shield 





5 rounds/level 


Shocking Grasp 


Touch 


Instant 


Sleep 


3* 


5 rounds/level 




Second Level 


Detect Invisibility 


1/level 


5 rounds/level 


Find Traps 


3 


3 turns 


Hold Person (CI) 


12* 


2/level 


Invisibility 


Touch 


Until Attack 


Knock 


6 


Instant 


Mirror Image 





3 roimds/level 


Ray of Enfeeblement 


1 + .5/level 


1 round/level 


Resist Fire 


Touch 


1 turn/level 


Silence 15' Rad 


12 


2 rounds/level 


Slow Poison 


Touch 


6 turns/level 


Snake Charm 


3 


5-8 rounds 


Spiritual Hammer 


1/level 


3 -t- 1/level 


Stinking Cloud 


3 


1 round/level 


Strength 


Touch 

Third Leve 


6 turns/level 


Animate Dead 


1 


Permanent 


Blink 





1 round/level 


Cure Blindness 


Touch 


Permanent 


Cause Blindness 


Touch 


Until Cured 


Cure Disease 


Touch 


Permanent 


Cause Disease 


Touch 


Until Cured 


Dispel Magic (CI & MU) 


12 (MU) 
6 (CI) 


Instant 


Fireball 


lH-1/level * 


Instant 


Haste 


6 


3 -(- 1 round/level 


Hold Person (MU) 


12 


2 rounds/level 


Invisibility 10' radius 


Touch 


Until Attack 


Lighming Bolt 


4 -1- 1/level 


Instant 


Prayer 


6 radius 


1 round/level 


Protection from Evil (Good) 


Touch/10' radius 


2 rounds/level 


I*rotection from Normal Missiles 


Touch 


1 turn/level 


Remove (bestow) curse 


Touch 


Permanent or imtil cured. 


Slow 


9 + 1/level 


3 -h 1 round/level 


■* Hold Person (CI) has a range ( 


jf only 6 sq. in the game. 


* Sleep, apparently, is more like 3 -i- 1/level in range 


! in the game. 


* The range for the FIREBALL 


spell appears to be 10 -I- 1/level in the game. 
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Sokal Keep 

1) There's a secret door in the NE comer, 
which gives way to the Secret Treasure Room. 
There, you'll find magic weapons and an armor. 

2) In order not to fight with the undead pa- 
trols. Parlay with them Nicely and tell them 
SHESTNl, before speaking with Ferran Marti- 
nez, and SAMOSUD after that. 

3 ) Whenever you encounter specters here, (At 
the south of the keep in the middle, and to the 
west of the Hobgoblin and Ore assault) Parlay 
Nicely and say LUX. This will save you a fight. 

4)Tell the truth to FerranMartinez, and you'll 
have cleared the Keep. 

5) You can rest anywhere after defeating four 
undead patrols (If you leave the keep and then 
return you'll have to defeat another four patrols), 
or in the entrance, where you find the dead elf. 

Kuto's Well 

1) There's an Old Hag in the south building 
guarded by lizard men and giant lizards. Search 
her room and you'll find magic items there. 

2) Climb down the well. In the top NE room 
is Norris the Gray's treasure. 

3) Although there is no special mission to kill 
Norris, the Council will give you a reward both 
for clearing the block and killing Norris. 

4) You can rest in the catacombs beneath the 
well after defeating Norris. 

Mantor's Library 

1) Don't enter the garden. There's nothing 
there except trouble. 

2) In the History Section, search until you find 
the "Lex Geographica", "History of the North", 
and "Grand Historian's Records of the Arts of 
War". There's nothing else worth it here. 

3) In the Rhetoric Section lives a basilisk, but 
there are no interesting books here. 

4) In the Philosophy Section search until you 
find "Fyedeth's Discourses on Power" and 
"Urgund's Descriptions of Darkness". 

5) There are no books worth it in the Mathe- 
matics Section. 

6) When you leave the library with books, 
you'll be confronted by a spectre of the librarian. 
You'll have to kill him. The council will keep 
asking for books in the proclamations, but you 
can simply ignore them. 

Podol Plaza 

1 ) When you are in the mission, approach the 
structure in the center and listen. Enter disguised, 
and keep alow profile. After the auction finishes, 
return to the council for your reward. 

2) When you come back after reporting the 
auction, you'll need ten random encounters to 
clear the block. Then you can rest anywhere. 

Wealthy Area 

1) Don't search the beds. There's nothing 
there and the ores will come back. 

2) Take the six leather holy symbols if you 
find them. You'll need them to enter the Temple 
of Bane. 

Temple of Bane 

1) Mace will wait until you defile the altar 
and/or find all three treasures before he attacks. 
The treasures are, 2 north and 2 east, 9 east and 2 
south, and 6 east and 5 south of the northern door. 
Search there. 

2) Bring Dirtan with you. He'll work for free. 
Just go to Bishop Braccio when you are asked for, 
and he'll give him to you. 

Cadorna Textile House 

1) There's a well in the northwestern part of 
the block. Haveathief, wearing armor no heavier 
than leather, climb down. Agree with the guild 
master and he'll get you south without having to 
encounter any wandering monsters. 

2) If you leave the block after defeating Grish- 
nak, he'll attack you again. This is great, since he 



has powerful magic-user scrolls with spells you 
can scribe. So just leave and come back imtil you 
have enough copies of the scrolls for every one of 
your spellcasters. Also take the brass key, as 
you'll need it to free SkuUcrusher. 

3) SkuUcrusher works for free "til you return 
to Phlan. He'll point the way to the ogre leader. 

4) After defeating the ogre, you'll find the 
treasure. Don't ojjen it, as it will be detected, 
unless the thiefs guild counterfeits the seals. If 
you defeat 10 random encounters, the block will 
be cleared. 

Kovel Mansion 

1) Keep in search mode. The Mansion is full 
of traps and treasures. 

2) When following the two thieves, follow the 
one going south after they split up. He'll guide 
you to most of the guild. 

3) After defeating all of the thieves, the block 
will be cleared and you can rest anywhere. 

Valhlngen Graveyard 

1) Don't go on the mission until the cotmcil 
gives you a magic Sword -(-1/+3 vs. Undead, and 
scrolls with restoration spells. The restoration 
spell will restore a level to a character which has 
been drained by a vampire, specter or wight. 

2) There are three types of random monsters 
in the Graveyard: Skeletons,Zbmbies and Wights. 
Each is created by a specter working on the 
graveyard. After defeating one specter, you'll 
have to face no more of his type of monster. The 
three specters are in the southwestern building, 
the one directly to the northeast, and the one to the 
southwestof the building in form of across. Each 
is guarded by a squadron of his monsters, and the 
one in the southwestern building has the ante- 
room full of poisonous gas. Cast a bless and/or 
prayer spell before to lower the chance of your 
characters being affected. 

3) In the building in the form of a cross is a 
vampire's coffin. Sanctify it. 

4) In the building to the northwest of the 
coffin, guarded by specters, there is a buried 
knight who will give you magic items. 

5) After defeating all three main specters, and 
the ones outside the Knight's tomb, go the north- 
eastern structure, and enter through a secret door 
in the eastem part. Then descend. You'll face a 
vampire and a few were-dogs. Be careful of the 
charm-gaze of the vampire. After you defeat him 
here, go to where his coffin was. You'll face him 
again, although alone. After defeating him both 
times, the graveyard will be cleared. 

6) You simply cannot rest in the graveyard 
until the vampire is vanquished. 

Nomad Caiop 

Don't kill the nomads. It simply is not worth 

it. Accept to help them, kill three waves of 

kobolds (There will be no time to rest between 

waves), and accept the reward they'll give you. 

Sorcerer's Island 

1) When you enter, go directly to the right as 
soon as you can. You'll be teleported and you 
will have avoided the maze. 

2) Keep in search mode. When you find 
teleporters, you '11 also find a pile of rocks. Throw 
one in and then go through, except in the firstone. 

3) After the first one, go nordi and then east to 
the next teleporter. Then follow the long corridor 
until you find the next one. Then go north, and 
finally through the door, saying the password. 

4) The password is NOKNOK 

5) Hit the machinery, and then run for your 
life. Don't stay to inflict more damage to it. 

6) In the southern room you'll find lizard 
men. Free them and don't fight them. 

7) After you kill Yarash, you'll find a dial on 
the north wall. Gold, Silver and Copper will send 
you to treasure rooms, while Blue will get you to 
the main corridor in the entrance. 



Kobold Caves 

1 ) Enter through the large cave. After defeat- 
ing the wyvem you can rest a while. Go north and 
find its treasure. 

2) Keep in search mode. 

3) Wake the guard. He'll take you to the king. 
Everywhere he tap* there's a trap. 

4) In the northwestern part there is a prison 
with a princess. Free her, and she'll fight fanati- 
cally against kobolds and will not charge for her 
services. 

5) You'll face three waves in the throne room, 
with no chance to rest between them. If you need 
to heal someone, choose Continue Fight after 
killing all of them, and heal them. The first wave 
will consist of kobolds, kobold archers, and 4 
trolls. Between the first and second wave you'll 
be hit by volleys, so don't have characters with 
too low HP. The second wave consists of Wild 
Boars, kobolds, and kobold archers. The third 
consists of two human magic-users, some trolls 
and some Wild Boars. 

6) After the Kobold King is dead, you'll have 
dealt with the kobolds. In the northeastem part is 
a treasure room, and in it a bottle, which contains 
an Efreet who'll help you battle the vampire in 
the Graveyard if you haven't defeated him yet. 

Zhentil Keep 

1) The papers you bring have orders to kill 
you. However, it will take a while to the Keeper 
to finish reading it. At dinner, talk about as much 
as you can, and sleep with a guard. 

2) After the guards try to kill you, you have 
two choices. You can run like hell to the exit, or 
you can approach the keep in the center. If you do 
the latter, you'll start facing waves of guards until 
you face the Commandant. That will be the last 
encoimter and the Keep will have been cleared. 
Both, however, will yield the same reward. You 
simply get more experience by killing everyone 
off, but you are more likely to die yourself. 

Buccaneer's Base 

You can only enter the Base if you are on a 
Mission to rescue the child. There are two ways 
of rescuing him: 

1 ) Go to the Animal Pen, release the animals, 
who will start a stampede. This will distract the 
guards, and you can free the child, and run for the 
exit. A few guards will spot you, but you can deal 
with them. 

2) You can try to enter the Captain's quarters 
in the south, or the Slave Pen, by force. After a 
few waves of guards, you'll face the captain. 
After killing him, the camp will be cleared. 

Both ways yield the same amount of reward. 
Once again, you'll get more experience by doing 
the latter, but you are more likely to be killed too. 
Those encoimters get harder and harder. 

You can rest where they take you when you 
enter the camp. 

Lizard Men Keep 

If you freed the lizardmen in the Sorcerer's 
Island, tell the chief the word SAVIOR when you 
find him. Then champion him. If you defeat the 
challenger, the Leader will pledge not to attack 
Phlan, and you can collect your reward. Other- 
wise, you have to kill all lizardmen on the sur- 
face, and all giant lizards beneath to clear the 
block. There is a anti-magic shell in the whole 
keep, so no spells will work. Keep this in mind. 

Stojanow Gate 

1) If you disguise yourself with a wagon, you 
can get past the bugbears in the entrance. Then 
attack each tower separately. When the alarm 
sounds, you can rest it off. It only lasts an hour. 
Then go back and kill the bugbears, and the gate 
will be taken. 

2) If you don't want to get disguised, you'll 
have to face the bugbears and the ettins and 
magic-users all together. Good Luck! 



3) The man with the wagon is only there 
during daylight hours (0.00 - 12.00) 

Va^evo Castle 

1) There are two entrances to the Maze. The 
one on the southeast is the better one. Just say the 
word RHODIA to enter. 

2) The alarm only lasts one hour. If the alarm 
is off, you can rest anywhere. When the alarm is 
on, the maze and castle piroper are full of poison- 
ous snakes. 

3) There are two entrances to the castle. The 
one on the southeast gets you to a false Tyran- 
thraxus, so take the one on the northwest. 

4) When you have an encounter outside the 
maze, parlay with them. Choose Meek and say 
HARASH, or Abusive or Haughty and say Tyr- 
anthraxus, and they'll leave you alone. 

5) On the top floor, don't go east. The room 
there drops you into a Medusa's lap. 

6) If you go to Genheeris Office in the north- 
west, parlay don't choose Meek or Nice. He'll 
offer you to job and kill Tyranthraxus. But if you 
don't go to the south to kill him immediately, 
he'll slip away. He carries a Lighming wand. 

7) Tyranthraxus Lair is a hard encounter. First 
you have to defeat many guards, who are six level 
and therefore immune to sleep spells. (After the 
5th level, sleep spells don't affect you). And they 
have many HP. So use Hold spells and Stinking 
clouds to kill them off. Then don't accept Tyran- 
thraxus offer. Save a few Stinking Clouds for 
him. Spread, since his breath is very dangerous, 
and you '11 be better off if he only kills one of your 
characters. He is not affected by Fireballs, Light- 
ning bolts, sleep, charm, or hold spells, and he is 
very hard to hit. If you manage to dispell his 
magic with a Dispel Magic, then Magic Missiles 
will hurt him and he'll be easier to hit. Or you can 
cast a stinking cloud on him, and keep hitting him 
with magic missiles and arrows. DON'T AP- 
PROACH HIM TO MELEE DISTANCE! He'll 
kill you for sure. Then try casting, while he is on 
the stinking cloud, some dispel magic, and also 
try to Paralyze him with a wand (I don't recall 
where you can find one, but you can). After he is 
paralyzed, get him. Then, go to the Council and 
collect your reward. You've Won! 

Miscellaneous 

1) There is a silver dragon near the Barren 
River's source. Follow it, and then go one square 
north and one west. Ask humbly for his help, and 
for God's sake don't fight him. He'll give you a 
few pointers. 

2) You can try to rest anywhere in the wilder- 
ness, but you can always be interrupted. This, 
however, seldom happens. 

Adventurers Journal 

A) Proclamations cfThe City Council of New 
Phlan. The true proclamations are: LK, CI, CX, 
CXIV, CXXVI, CXXIX, CXXXIV, CUV, CCI, 
CCIV and CCXIV. 

B) Journal Entries. The true entries are: 3, 7, 
8, 10 (Map of the southern part of Cadoma's 
Textile House), 11, 14, 15 (Map of the southeast- 
em partofValjevoCastle'sMaze), 16, 17, 18, 19, 
20, 2 1 , 23, 25, 26 (Map of the maze on the bottom 
part of the Sorcerer's Island. If you followed my 
instructions, you bypassed it), 28 (the location of 
the Nomad Camp relative to the Kobold Cave), 
29 (NE of Valjevo Casde's Maze), 30, 3 1 , 33, 35, 
37 (Specially useful maps of the city and the 
area), 41 (NW of Valjevo Castle's Maze), 42 
(Sketch of the Kobold Caves), 43, 46, 47, 48, 49, 
50,51,55,56, and 57. 

C)Tavern Tales. Most tavern tales are simply 
scenes from the tavern. However, Tales 1, 3, 16, 
21 and 23 are worth noticing. 

This is all, for now. Keep up good work. 



The Hacker's Ultimate Copy & Deprotection Utility: Super lOB Collection ! 



ALL four volumes of Super lOB controllers (through issue #65) in 



COMPUTIST developed the ultimate copy pro- 
gram to remove copy protection from software; 
The Super JOB program. 

Since the introduction of Super lOB, COMPUTIST 
has used this flexible program to deprotect (or partially 
deprotect) dozens of commercial programs with far 
ranging protection schemes. 

Super lOB deproteds disks by using a modified 
RWTS (the subroutine in iX)S which is responsible for 
the reading and writing of disk sectors) for reading 
from the protected disk and then using a normal RWTS 
for writing to the deprotected disk. 

This package contains: 

•Three disks (supplied in DOS 3.3), Each disk 
contains at least 60 Super lOB Controllers including 
the standard, swap, newswap and fast controllers. 
Also included is version 1 .5 of Super lOB, the Csaver 
program from COMPUTIST No. 13, and a Menu Hello 
Program that lists the available controllers and, when 
you select one, automatically installs it in Super iOB 
and RUNs the resulting program.* 

•A reprint of Disk Inspection and the Use of Super 
IOB, from COMPUTIST No. 17. This artcle explains 
how to write your own Super IOB controllers. 

•COMPUTIST No. 32, which contains an exten- 
sive article detailing the hows and whys of Super IOB 
v1 .5 and at least 5 articles using the new Super IOB 
program. 

Several of the controllers deprotect the software 
completely with no further steps. This means that 
some programs are only minutes away from deprotec- 
tk)n (with virtually no taping). 

The issue of COMPUTIST in which each control- 
ler appeared is indicated in case further steps are 



required to deprotect a particular program." 

'Requires at least 64K of memory. 

"Although some controllers will completely depro- 
tect the program they were designed for, some will not, 
and therefore require their corresponding issue of 
COM PUTIST to complete the deprotectbn procedure. 

The SUPER IOB Collection 

Volume 1 ofthe Super IOB collection covers all the 
controllers from COMPUTIST No, 9 through No. 26. 
Also included are the newswap and fast controllers 
from COMPUTIST No. 32. The following controllers 
are on volume 1: 

Advanced Blackjack'AlphabetZoo'AreadeMachine-Archon 
II -Archon 'Artsci Software -Bank Street Writer -Barrons SAT 
•Beyond Castle Wolfenstein -BSW lie Loader 'Castle 
Wolfenstein 'Computer Preparation; SAT 'Dazzle Draw 'DB 
Master 4 Plus 'Death In the Carribean 'Dino Eggs 'DLM 
Software 'Electronic Arts 'F-1 5 Strike Eagle 'Fast Controller 
•Fathoms 40 -Financial Cookbook 'Gessler Software 
'Grandma's House'TheHeist'ln Search ofthe Most Amazing 
Thing 'Instant Recall -Kidwriter 'Lions Share 'Lode Runner 
'Mastertype'Match Maker 'Miner 2049er'Minit Man 'Mufplot 
'Newsroom 'Newswap controller 'Penguin Software -Print 
Shop Graphic Litxary 'Print Shop 'Rendezvous with Rama 
'Rockys' Boots 'Sargon III 'Sea Dragon 'Shiela -Skyfox 
'Snooper Troops 'Standard controller 'Stoneware Software 
'Summer Games -Super Controller -Super Zaxxon -Swap 
Controller -TAC 'Ultima I & II 'Word Challenge -Xyphus 
'Zaxxon 

Volume 2 ofthe Super IOB collection covers all the 
controllers from COMPUTIST No. 27 through No. 38. 
The following controllers are on volume 2; 

Alice in Wonderland 'Alphabetic Keyboarding -Alternate 
Reality -Autoduel -Checkers -Chipwits -Color Me'Conan.data 
'Conan.prog 'CopyDOS 'Crisis Mountain 'Disk Director 



'Dragonworld 'Early Games 'Easy as ABC -F-IS Strike 
Eagle •Fantavislon •Fast controller •Fishies •Flight Simulator 
'Halley Project •Hartley Software (a) •Hartley Software (b) 
•Jenny of the Prarie •Jingle Disk •Kidwriter •Kracking Vol II 
'Lode Runner 'LOGO II (a) 'LOGO II (b) 'Masquerade 
'Mastering the SAT 'Microtype; The Wonderful World of 
Paws 'Microzines 1 'Microzines 2-5 •Miner 2049er •Mist & 
View to a Kill -Murder on the Zinderneuf -Music Construction 
Set -Newswap controller -Olympic Decathlon -Other Side 
-Phi Beta Filer -Pitstop II •Print Shop Companion 'RDOS 
•Robot War -Spy vs Spy •Standard controller -Sundog V2 
-Swap controller -Sword of Kadash •Synergistic Software 
-Tawala's Last Redoubt -Terrlptn Logo -Threshold -Time is 
Money -Time Zone -Tinkl Tonk! -Troll's Jale -Ultima IV 
-Wilderness -Word Attack & Classmate -World's Greatest 
Baseball -World's Greatest Football 

Volume 3 of the Super IOB collection covers all the 
controllers from COMPUTIST No. 39 through No. 53. 
The following controllers are on volume 3; 

2400 AD. -Altemate Reality; The Dungeon -Address Book 
-American Challenge-AppleGradebookV2.6-ArcadeAlbum 
#1 -Arcade Boot Camp -Aztec -Bard's Tale II -Beachhead 
•Beyond Castle Wolfenstein •Black Magic •Blue Powder/ 
Grey Smoke •Borrowed Time •CasUe Wolfenstein •Cat-N- 
Mouse -Catalyst 2.0 & 3.0 •Centipede •Championship Golf 
•Championship Wrestling •Charlie Brown 123'S •Colonial 
Conquest -Comprehension Skills -Computer Preparation lor 
the SAT V3 •Coveted Mirror •Coveted Mirror RWTS Capture 
•CPU68000NV.4O2 •Cranston Manor •Crime Stopper -Dam 
Busters -Decimals -Destroyer -Dino Dig -Earth Orbit Station 
-Encyclopedia Britannica -Escape -Fish Scales -Foundation 
Course in Spanish -Frog -GFL Football -Goonies -Great 
American Cross-Countty Road Race -Handlers -H.E.R.O 
-Inferno -Information Master -J-Bird -Jenny's Journeys -Joe 
Theisman Football -Kindercomp -Kung Fu -Light Simulator 
-Manuscript Manager -Master Diagnostics lie -Mastering 



ONE' package! 

Math -MECC -MECC Software -MECC Swap^MECC Without 
RWTS •Missing Links •No Error Check & No DOS -Ogre -One 
On One •Oregon Trail -Penguin Software •PFS ProDOS 
•Pitfall II •Puzzles&Posters •Racter •Randamn •Reading 
Style Inventory •RingQuest-Sdence Toolkit •Science Toolkit 
Revi •Skyfox •Snooper Troops •Speed Reader II •Spy's 
Adventure •Starcross •Super Bunny •Temple Apshai Trilogy 
•The American Challenge •Translyvania •Troll Courseware 
•Ultima I -Ultima IV •Wizard's Crown •Word Attack •Word 
Maze •World Karate Championship •Rings of Zilfin •Zorra 



NEW! NEW! NEW! NEW! NEW! NEW! 

Volume 4 ofthe Super IOB collection covers all the 
controllers from COMPUTIST No. 54 through No. 65. 
The following controllers are on volume 4: 

Abracadata/Design Home^AlgebraS &4^A(tierican Challenge 
•Animate side (A) •Animate side (B) •Applewriter Preboot 
-Aztec -Castle Wolfenstein -Championship Wrestling 
-Crossword Magic 4.0 -Crypt of Medea -Dam Busters -Dazzle 
Draw -Death Sword -Deathlord Scenario -Digital Paintbrush 
Sys -Dondra -Dr Ruth •Dreadnoughts •Elem Social Studies 
#3 •Elem Social Studies #6 •EOS/Arctic Fox 'Estimation 
•Fraction Factory •Fractions •General Chemistry #8 -Gl Joe 
-Hardball -Lords of Conquest •Matchmaker WGF •Math 
Blaster •Maxwell Manor •MECC (Apr 89) •Microzine #26 
•Mind Over Matter (1984) •Nightmare Gallery -One on One 
(new) -Path Tactics •Penguin 'Pitfall II 'Pool 1 .5 'Print Shop 
Data Disk -Project Space Station -PSAT Word Attack Skills 
-Realm of Impossibility-Roadwar2000-Science Prof-Science 
Toolkit Modules -Science Toolkit -Seaspeller -Songwriter 
•Space Station •Spell It •Spy Hunter •Sunburst •Super Sun./ 
Gen Manager •Super Sunday •Teachers Rec Book^Tellstar 
II •Test Maker •The New Oregon Trail •Troll Shop Right 
•Ultima V (a) •Ultima V (b) •Ultima V (c) •Vocabulary Adv I • 
Zilfin • 

To order see page 22 
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I Book Sale I 

We went to the auction at Tech Alliance (Call A.P.P.L.E.) and bought a shelf full of technical 
reference books. Most are for the Ilgs. We'll sell them out the door for S5 each. Limited number of 
copies (shown in parenthesis) so don't delay. 

Technical Reference 

Books for only 

$5 each* 

*plus postage & handling 

Applesoft Tutorial w/disk by Apple (1) 
Apple II Instant Pascal Reference Manual by Apple (2) 

for lie 

Apple lie Technical Reference Manual by Apple (3) 
Inside the Apple lie by Gary B. Little (1) 

for IlgS 

Programming the 65816 by William Labiak (2) 

Apple Ilgs Hardware Reference by Apple (49) 

Apple Ilgs ProDOS 16 Reference w/ disk by Apple (31) 

If you really want to know more about your Ilgs than here's 
your chance to get the info at a real savings. 



The Snapshot (NMI) Copycard 

We have a limited number (6) of these cards. If you have a II, 
11+ or He here is your chance to get an NMI card for only $25. 

The card comes with copy software as well as a "snapshot" 
option to allow you to dump the screen to your printer at any time 
without trashing the program in memory. It also comes with 
software that allows you to switch memory resident programs at 
the touch of a button, just like "Softswitch". 



We finally completed the move to Eatonville. Everything is gone 
from the Tacoma location. But there's a problem. I don't have enough 
space to store all the boxes. So here's a deal for you: 



The Book of Softkeys 
(volume 1-3) for only 



$1 each* 



*plus postage & handling 



Book of Softkeys I (Compiled from issues 1-5) 

You get all of these softkeys: 'Akalabeth • Amper-Magic 'Apple Galaxian 'Aztec -Bag of 
Tricks 'Bill Budge's Trilogy of Games -Buzzard Bait •Cannonball Blitz 'Casino 'Data 
Reporter 'Deadline "Disk (Organizer D 'Egbert II -Hard Hat Mack 'Home Accountant 
•Homeword 'Lancaster 'Magic Window 11 'Multi-Disk Catalog 'Multiplan 'Pest Patrol 
'Prisoner II 'Sammy Lightfoot 'Screenwriter 11 'Sneakers 'Spy's Demise 'Starcross 'Sus- 
pended 'Ultima n 'Visifile 'Visiplot 'Visitrend 'Witness 'Wizardry 'Zork I 'Zork II 'Zork HI 

Plus: 

How to crack Applesoft program disks 

Introduction to Boot Code Tracing 

How to create DeMuffin (A disk cracking tool) 

Diskedit (Make changes directly on your disks) 

Diskview (Examine protected disks) 

Getting on the Right Track (Fix your Apple drive so it tells you what track it is on.) 

Hidden Locations on your Apple Revealed 

Fix your Rana drive so you can Boot Code Trace 

Neat tricks and bombs that you can put in your programs 

Book of Softkeys II (Compiled from issues 6-10) 

You get all of these softkeys: 'Apple Cider Spider 'Apple LOGO 'Arcade Machine 'The 
Artist 'Bank Street Writer 'Cannonball Blitz 'Canyon Climber 'Caverns of Freitag -Crush, 
Crumble & Chomp 'Data Factory v5.0 'DB Master -Essential Data Duplicator I 'Essential 
Data Duplicator III -Gold Rush 'Krell LOGO 'Legacy of Llylgamyn 'Mask of the Sun 'Minit 
Man 'Mouskattack 'Music Construction Set 'Oil's Well 'Pandora's Box -Robotron -Sammy 
Lightfoot -Screenwriter II v2.2 -Sensible Speller IV -Sensible Speller 4.0c/4.1c -Spy Strikes 
Back 'Time Zone 'Visible Computer 6502 'Visidex -Visiterm 'Zaxxon 'Hayden Software 
'Sierra OnLine Software 

Plus: 

How to create DeMuffin Plus (A disk cracking tool) 
Super lOBv 1.5 

Using ProEKDS on a Franklin Ace 
Crunchlist II 
The Controller Saver 

Making Liberated Backups That Retain Their Copy Protection 
Examining Protected Applesoft BASIC Programs 
.Game Cheats fpr; Castle Wolfenstein, Miner 2049er, Serpentine, Star Maze, Ultima H, 
Wizard and the Princess, Wizardry: Proving Grounds of the Mad Overlord, Zaxxon 

Book of Softkeys III (Compiled from issues 11-15) 

You get all of these softkeys: Alien Addition 'Alien Munchies 'Aligator Mix 'Computer 
Preparation SAT 'Cut and Paste 'Demolition Division 'DLM Software 'Einstein Compiler 
v5.3 'Electronic Arts Software 'Escape from Rungistan 'Financial Cookbook 'Flip Out 'Hi- 
Res Computer Golf II -Knoware -Laf Pak 'Last Gladiator 'Learning With Leeper 'Lion's 
Share 'Masterlype 'MatheMagic -Minus Mission 'Millionaire 'Music Construction Set 'One 
on One 'PFS Software 'Penguin Software 'The Quest 'Rocky 's Boots 'Sabotage 'Seadragon 
'Sensible Speller 'Snooper Troops (Case 2) 'SoftPom Adventure 'Stickybear BOP -Suicide 
'TellStar -Tic Tac Show -Time is Money -Transylvania -Type Attack 'Ultima Hi-Exodus 
'Zoom Graphix 

Plus: 

Putting Locksmith 5.0 Fast Copy Into a Normal Binary File 
CSaver: The Advanced Way to Store Super lOB Controllers 
The CORE Disk Searcher 
Modified ROMs 
The Armonitor 



Book of Softkeys a volume I O volume n U volume HI 

Check the box(s) for the book(s) you want then add SI per book plus 
$.65 handling plus the correct postage to get final cost... 



price 
One Book $1 
Two Books $2 
Three Books S3 


US/Mexico 

handling postage 

S.65 51.85 

S.65 S2.40 

S.65 S2.40 


Canada 

postage 

S2.28 

S3.70 

S4.32 


Foreign 
postage 

$5.55 
9.19 

12.83 


S 


Snapshot (NMI) ( 


I!ard w/softw 

list price 


are 




$25 


S 


Technical books: 


Prices shown here are complete and 
include the cost of the Book plus 
postage and handling. Select the 
proper column for your address. 

U.S. & Other 
Mexico Canada Foreign 




Applesoft Tutorial 


$29.95 


$8 


$9 


$17 


$. 


Instant Pascal Reference 


$22.95 


$8 


$9 


$17 


$. 


Ho Technical Reference 


$24.95 


$9 


$10 


$17 


$. 


Inside the Apple lie 


$18.00 


$8 


$9 


$17 


$. 


Programming the 65816 


$24.95 


$8 


$9 


$17 


$. 


Ilgs Hardware Reference 


$26.95 


$9 


$10 


$17 


$. 


FioDOS 16 Reference 


$29.95 


t $9 


$10 


$17 J 


$. 



The Super lOB Collection: includes all four disks with Super lOB version 1.5, COM- 
PUTIST #32, PLUS a reprint of "Disk Inspection and the Use of Super lOB". 

□ US/Canada/Mexico - All four volumes $30.00 $ 

□ Other Foreign - All four volumes $35.00 $ 

□ US/Canada/Mexico - Volume #4 only $8.00 $ 

a Other Foreign - Volume #4 only $10.00 $ 



Total enclosed... S_ 



City 



_Zip. 



Counliy . 



_PhonB . 



GvuiQmc 



. E*p. . 



Sif^ture _ 



_CP72 



•Send US funds drawn on US bank. ' Please allow 4-8 weeks for 1st issue or add SI. 25 for 
postage and we will send your 1st issue by 1st Class mail. • Send check/money order to: 

COMPUTIST 33821 E Orville Rd Eatonville WA 98328 (206) 832-3055 
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unClassifieds 



How to place an Unclassified Ad 

If possible, send text on a 5 1/4 inch Apple formated disk, 
include a typed sample copy with appropriate instructions. Use up 
to 40 characters per line, we will adjust word wrap. The Computist 
club member charge is $4 (for processing) plus 50 cents per line. 
For non-members, the charge is $4 plus $1 per line. Multiple 
insertions of the same ad are charged only for the line rate, unless 
changes are rnade to the copy. 

Special Graphics Instructions: The first three words of the 
first line are printed in bold for free. If you want other words 
bolded, use 5 characters less per line. Use 1 characters less per line 
if you have a lot of uppercase bold letters. Bold letters are wider 
than normal. Circle the words you want bolded. If you want a line 
centered, write CENTER next to that line. There is no charge for 
centering any line. 

You must check your ad for errors, the first time it runs. Errors 
on our part will be corrected, then, for free. Errors or changes on 
your part will be charged the $4 processing fee. 

Our liability for errors or omissions is limited to the cost of the 
ad. 

We reserve the right to refuse any ad. 

Washington state residents add 7.8% sales tax. 

Send a check or money order (funds drawn on US bank only) 
for the entire amount to: 

COMPUTIST unCLASSinEDS 

33821 East Orville Road 

Eatonville, WA 98328 



RENT or BUY IIgs SOFTWARE 

•Money Back Guarantee 

•Catalog contains over 200 titles 

•Rent for 15% - 20% of list price 

•Prices comparable with mail order 

•Rental fee discounted from purchase price 

•$15 Lifetime Membership Fee 

GSoft 

7350 Ulmerton Road #924 

Largo, Florida 34641 

(813) 536-4352 

DID YOU KNOW? 

The COMPUTIST SUPER INDEX has over 1000 
softkeys and tips not printed in the contents or 
back-issue listings of Computist. With issue #71, 
the CSI data base has over 5,000 records and 
26,000 entries! Includes Apple, IBM, & Mac. 
Order today! See back cover of issue #66 or 72, 
or write to: 

David R. Hopkins 
3495 W. Hoye Place 

Denver, CO 80219. 



TRADE YOUR APPLE SOFTWARE 

Send your list of programs to trade. I have over 
120 originals to trade. 

Byron Blystone 

PO Box 1313 

Snohomish, WA 98290 

Computist Back Issues. Most issues from #1 to 
present. Also the Book of Softkeys Volumes I-III. 
$100 takes everything. 

Robert Meyer 

7009 McGill Street 

Niagara Falls, ON L2J 1L8 

Canada 

(416) 356-8847 

THINGS FOR SALE 

Syntech MIDI interface (Passport compatible) 
16K printer buffer 

ThunderClock 

Microsoft SoftCard 

Mountain Computer Music System 

Paddle/AdApple (unused) 

ALF music card 

He 80 C01/64K card 

All or part, make offer. 

Kim Griffith (213) 432-2143 

RDEX Contributors: 

Marc Batchelor 16 

George Bigelow 6 

James E. Bulman 7, 19 

Dr Crack 17 



Ed 

Dan 

The Big 

Rob 

Randy 

The Home 

Peter 

The 

Wayne 

Sang Jin 

Jeff 

Bob 

Nancy 

Joseph P. 

AlanL 

Arturo V 

The 

LesB. 

Mike 

The Dark 

Frank M 

Dave 

Jim 

George 

Jason 



Ron 

Groucho 

The 

Joe 

Brian A 

John C. 

Ricky Lee 

Michael 

Kzin 

Don 

Gary 



Croft 17 

Cross 6 

Durf 4 

Fiduccia 16 

Flood 18 

Front 5 

Green 15 

Greywolf .5 

Hildebrand 6 

Hong 7 

Hurlbun 4 

Igo 19 

Jentzsch 10 

Karwoski 7 

Krause Jr 1 1 

Magidin 20 

Mailman 17 

Minaker 20 

Patemo 17 

Phoenix 9 

Polosky 9 

Pritchard 19 

Ross 18 

Sabeh 8 

Schaad 19 

Sidewinder .6 

SkyPhantom 18 

Stankiewicz 5 

Tarz 19 

Terminator 15 

Trodello 16 

Troha 11,12 

Tucker 12 

Wallace 7 

Warren ....8 

Warrior 6 

Westcott 9 

Wills 7 

Zorro 15 



Most Wanted 

72 50 Mission Crush, SSI 
65 Airheart, Broderbund 
63 Alcon, Taito 

63 Alien Mind, PBI Software 

73 American History Explorer Series, Mindscape 

72 Ankh, Datamost 

73 Ant Farm, Sunburst 

67 Apple Panic, Broderbund 

67 Aquatron, Sierra 
69 Axis Assassin, ? 

63 Bad Street Brawler, Mindscajje 

68 Bank Street Writer Plus, Broderbund 
73 Bank Street Beginner's Filer, Sunburst 
73 Bank Street School Filer, Sunburst 

63 Beyond Zork, Infocom 
65 Bilestoad, Datamost 

69 Blue Powder - Grey Smoke, Grade 
63 Border Zone, Infocom 

65 Borg, Sirius 

67 Boimcing Kamungas, Penguin 

66 Boxing, ? 

63 Bubble Bobble, Taito 

65 Bureaucracy, Infocom 

69 Caverns of Callisto, Origin 

68 Centauri Alliance, Broderbund 

69 Checker, Odesta 
69 Chess 7.0, Odesta 

69 Chuck Yeager's Advanced Flight Trainer, Electronic Arts 

67 C'est La Vie, Adventure International 

68 Comics, Accolade 

63 Cosmic Relief, Datasoft 

65 Crime & Punishment, Imagic 

69 Crossword Magic v4.0, ? 
69 Cybernation, Nexa Corp. 

72 Cytron Masters, SSI 

66 Deathlord, Electronic Arts 
69 Delta Squadron, Nexa Corp. 

67 Desecration, Mind Games 

73 Designer Prints, MECC 

66 Disk Optimizer System, Nibble Notch 

65 Dondra, Spectnmi Holobyte 
69 Dragon Eye, Epyx 

69 Dueling Digits, Broderbund 

68 Dungeons and Dragons, Master Assistant vol2, SSI 

66 Dungeon Master (IIgs), FTL 

62 DROL, Broderbund 
72 Epidemic. SSI 

67 Epoch, Sirius 

63 Explore-Australia, Dataflow Computer Service 
67 Evolution, Sydney 

67 Falcons, Piccadilly 

68 Factastics Trivia, Dayslar 

69 Fit Wars, Sirius 
67 Force 7, Datasoft 

72 Gamma Force, Infocom 
69 Gemstone Healer, SSI 

73 Geometric Supposer (the), Sunburst 



66 GEOS, Berkley Softworks 

71 Gertrudes Puzzles, ? 

72 Galactic Gladiators, SSI 
63 Gladiator, Taito 

66 Goldrush, Sierra On Line 

67 Gorgon, Sirius 

66 GradeBuster 1 2 3, Grade Buster 

61 Gutenberg Sr., Micromation LTD. 

65 Halls of Montezuma, Electronic Arts 
69 Hard Hal Mack,? 

67 High Orbit, Softsmith 

67 Horizon V, Softsmith 

69 Impossible Mission, Epyx 

62 Indoor Sports, Mindscape 

68 Infocomics, Infocom 

66 Jane, ? 

63 Joker Poker, Mindscape 
72 Kabul Spy, Sirius 

71 Keyboarding Klass, Mastery Developement 

68 Kingdom of Facts, Santa Barbara/Thunder Mountain 

72 Lane Mastodon, Infocom 

67 Lancaster, SVS 

72 Laser Force (IIgs), Britannica 

66 Legacy of the Ancients, 
65 Lost Tomb, Datasoft 

65 Manhunter New York IIgs, Sierra On Line 

65 Mavis Beacon Teaches Typing (gs). Software Toolworks 

73 McGraw-Hill Problem-Solving Level 5 and 6, Tom Snyder 

67 Microwave, Cavalier 

66 Might and Magic H, Activision 
73 Mind Castle I, MCE Inc. 

69 Minotaur, Sirius 

63 Modem MGR, MGR Software 

68 Mr. Pixel's Cartoon Kit, Mindscape/Thimder Moimtain 
63 National Inspirer, Tom Snyder Productions 

66 Observatory (The), Mindscape/Lightspeed Software 

66 Odin, Odessta 

63 Operation Wolf, Taito 

68 Pensate, Datasoft/Softdisk 

69 PhantasieH, SSI 
6T Phantoms 5, Sirius 

67 Pig Pen, Datamost 

67 Project Space Station, Avantage 

67 Pulsar II. Sirius 

68 Pure Stat Basketball, ? 
72 Qix. Taito 

62 Quadratic Equations H, Olympus Educational Software 

63 Questron II, Electronic Arts 

68 Rails West, SSI 
63 Rastan, Taito 

67 Rear Guard, Adventure International 

63 Renegade, Taito 

67 Rescue Raiders, Sir Tech 

67 Rings of Saturn, Level 10, ? 

66 Risk, Leisure Games 

63 Rocket Ranger (IIgs), Cinemaware 

69 Roimdabout, Datamost 
63 S.D.I. (Ugs), Cinemaware 
72 S.E.UJ.S., SSI 

62 Sea Stalker, Broderbund 

67 Serpentine, Broderbund 
72 Silpheed (IIgs), Sierra 

68 Skeletal System, Brainbank 

63 Sky Shark, Taito 

63 Sound Song & Vision, Advanced Software 

67 Space Ark, Datamost 

62 Spare Change, Broderbund 

67 Spectre, Datamost 

62 Speedy Spides, Readers Digest 
67 Star Cruiser, Sirius 

67 Star Maze, Sir Tech 

63 StickyBear Math: Add & Subtract, Optimum Resources 

68 Sticlo'bear GS Versions 3.5, Xerox 
63 Strike Fleet, Electronic Arts 

67 Succession, Piccadilly 

65 Superstar Ice Hockey,Mindscape 
61 Sup>erstar Indoor Sports, Mindscape 

68 Talking Text Writer GS, Scholastic 

68 Tangled Tales, Origin Systems 

69 Tetris (lie). Spectrum Holobyte 
72 Theatre Europe, PBI 

65 Thunder Chopper, ? 

63 Ticket to Washington D.C., Blue Lion Software 
63 Tomahawk, Electronic Arts 

68 Tomahawk (IIgs), Datasoft 

69 Track Attack, Broderbund 

68 Triad, Adventure International/Thunder Mountain 

72 Triango (IIgs). CaUfomia Dreams 
68 Trinity, Infocom 

68 UltimaTrilogy, Origin Systems 

73 Unicom 5.25" software 

68 Volcanoes vl.8, Earthware Comp. Services 

66 War in the Middle Earth, Melbourne 
61 Wasteland, Electronic Arts 

67 Wayout, Sirius 

73 Where in Europe is Carmen Sandiego (3.5"), Broderbund 
73 Where inTmie is Carmen Sandiego (3.5"), Broderbund 
63 Wings of Fury, Broderbimd 
63 Wizardry: Return of Werda, Sir-Tech. 

68 Word Attack Plus (IIgs), Davidson 
65 Works (the). First Star Software 

67 Zenith, Softsmith 
63 ZorkQuest, Infocom 

IBM Most Wanted 

72 GBA Championship Football, Electronic Arts 

68 Graphitti, George Best Phillips Acadmey 
61 Gunship, Microprose 

63 Heros of the Lance, SSI 

72 Kings Quest IE, Sierra 

72 Operation Wolf, Taito 

72 Radio Baseball, Electronic Arts 

72 Ultima V, Origin 
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Eamon Adventure Games for only $1 each 

Adventure Gaming doesn't have to cost a lot. The Eamon Adventure Gaming system was 
created by Donald Brown and placed into the public domain. Since then it has been updated and 
improved by game players all over the world. Take a look at what SI will buy. (Get free games 
too . ) Note: Some Adventures are multi-part and take more than one disk. Be sure you have selected 
all of the disks. 



D 1 Main Hall & Beginners Cave 

□ 2 The Lair of the Minotaur 
Q 3 The Cave of the Mind 

□ 4 The Zyphur Riverventure 

□ 5 Castle of Doom 

□ 6 The Death Star 
a 7 The Devil's Tomb 

Q 8 The Abductor's Quarters 

□ 9 Assault on the Clonemaster 

□ 1 The Magic Kingdom 
Q11 The Tomb of Molinar 
Q 1 2 The Quest for Trezore 

□ 1 3 Caves of Treasure Island 

□ 14 Furioso 

□ 15 Heroes Castle 

□ 1 6 The Caves of Mondamen 
Q 17 Merlin's Castle 

018 Hogarth Castle 

□ 19 Death Trap 

□ 20 The Black Death 

□ 21 The Quest for Marron 

□ 22 The Senator's Chambers 

□ 23 The Temple of Ngurct 

□ 24 Black Mountain 

□ 25 Nuclear Nightmare 

□ 26 Assault on the Mole Man 

□ 27 Revenge of the Mole Man 

□ 28 The Tower of London 

□ 29 The Lost Island of Apple 

□ 30 The Underground Citjf 

□ 31 The Gauntlet 

□ 32 House of III Repute 

□ 33 The Orb of Polaris 

□ 34 Death's Gateway 

□ 35 The Lair of Mutants 

□ 36 The Citadel of Blood 

□ 37 Quest for the Holy Grail 

□ 38 City in the Qouds 

□ 39 Museum of Unnatural History 

□ 40 Daemon's Playground 

□ 41 Caverns of Lanst 

□ 42 Alternate Beginners Cave 

□ 43 Priests of Xim! 

□ 44 Escape from the Ore Lair 

□ 45SwordQuest 

□ 46 Lifequest 

□ 47 FutureQuest 

□ 48 Picnic in Paradise 

□ 49 The Castle Kophinos 

□ 50 Behind the Sealed Door 

□ 51 The Caves of Eamon Bluff 

□ 52 The Devil's Dungeon 

□ 53 Feast of Carroll 

□ 54 Crystal Mountain 

□ 55 The Master's Dungeon 

□ 56 The Lost Adventure 

□ 57 The Manxome Foe 

□ 58 The Land of Death 

□ 59 Jungles of Vietnam 

□ 60 The Sewers of Chicago 

□ 61 The Harpy Cloud 

□ 62 The Caverns of Doom 

□ 63 Valkenburg Castle 

□ 64 Modern Problems 

□ 65 The School of Death 

□ 66 Dungeons of Xenon 

□ 67 Chaosium Caves 

□ 68 The Smith's Stronghold 

□ 69 The Black Castle of NaGog 

□ 70 The Tomb of Y'Golonac 

□ 71 Operation Crab Key 

□ 72 House on Eamon Ridge 

□ 73 The Deep Canyon 

□ 74 DharmaQuest 

□ 75 Temple of the Guild 

□ 76 The Search for Yourself 

□ 77 Temple of the Trolls 

□ 78 The Prince's Tavern 

□ 79 The Castle of Count Fuey 

□ 80 The Search for the Key 

□ 81 The Rescue Mission 

□ 82 Escape from MansI Island 

□ 83 The Twin Castles 

□ 84 Castle of Riveneta 

□ 85 The Time Portal 

□ 86 Castle Mantru 

□ 87 Caves of Hollow Mountain 



□ 88 The Shopping Mall 

□ 89 Super Fortress of Lin Wang 

□ 90 The Doomsday Clock 
Q 91 FutureQuest II 

□ 92 The Fugitive 

□ 93 Hying Circus 

□ 94 Blood Feud 

□ 95 The Maze of Quasequeton 

□ 96 The Chamber of the Dragons 

□ 97 The House of Secrets 

□ 98 Slave Pits of Kzorland 

□ 99 In the Clutches of Torrik 

□ 1 00 Sorceror's Spire 

□ 101 Ground Zero 

□ 102 The Eamon Railroad 

□ 103 Top Secret 

□ 104 The Lost World 

□ 105 The Strange Resort 

□ 106 Camp Eamon 

□ 107 The Last Dragon 

□ 108 The Mines of Moria 

□ 109 The Forest of Fear 

□ 110 Fire Island 

□ 1 1 1 A Vacation in Europe 

□ 112 Hills of History 

□ 1 13 The Life-Orb of Mevtreiek 

□ 114Thror'sRing 

□ 115 The Ring of Doom 

□ 116 The Iron Prison 

□ 11 7 Dungeon of Doom (40 col) 

□ 1 1 7 Dungeon of Doom (80 col) 

□ llSPittfall 

□ 119AGrunewalde 

□ 119BGrunewalde 

□ 120 Orb of My Life 

□ 121 Wrenhold's Secret Vigil 

□ 122 The Valley of Death 

□ 1 23 Wizard of the Spheres 

□ 124 Assault on Doini Keep 

□ 125 The Mattimoe Palace 

□ 126 The Pyramid of Anharos 

□ 127 The Hunt for the Ring 

□ 128 Quest of Erebor 

□ 129A Return to Moria 

□ 129B Return to Moria 

□ 130Haradwaith 

□ 131 Nucleus of the Ruby 

□ 1 32 Rhadshur Warrior 

□ 133 The Final Frontier 

□ 134 Pyramid of the Ancients 

□ 135TheTombofEvron 

□ 136 The Mountain Fortress 

□ 137 The Ruins of Ivory Castle 

□ 138Star1ire 

□ 139 Peg's Place 

□ 140 Beginner's Forest 

□ 141 The Infested Fortress 

□ 142 The Beermeister's Brewery 

□ 143 The Alternate Zone 

□ 144 Gartin Manor 

□ 145A Buccaneer! 

□ 145B Buccaneer! 

□ 146 The House of Horrors 

□ 147A The Dark Brotherhood 

□ 147B The Dark Brotherhood 

□ 148 Journey to Jotunheim 

□ 149A Elemental Apocalypse 

□ 149B Elemental Apocalypse 

□ 149C Elemental Apocalypse 

□ 149D Elemental Apocalypse 

□ 150 Walled City of Darkness 

□ 151 EamonS.A.R.-1(DenebRaid) 

□ 1 52 The Computer Club of Fear 

□ 153 Lost! 

□ 154 A Trip to Fort Scott 

□ 155 Tomb of the Vampire 

□ 156 The Lake 

□ 157 Pathetic Hideout of Mr R. 

□ 158 The Lair of Mr Ed 

□ 1 59 The Bridge of Catzad-Dum 

□ 160 Monty Python & Holy Grail 

□ 161 A Operation Endgame 

□ 1 61 B Operation Endgame 

□ 161C Operation Endgame 

□ 162 Eamon 7.0 Demo Adventure 

□ 163 The Sands of Mars 
ai64ARealCliffhanger 



□ 165A Animal Farm 

□ 165B Animal Farm 

□ 166A Storm Breaker 

□ 166B Storm Breaker 

□ 166C Storm Breaker 

□ 167 Expedition to the Darkwoods 

□ 1 68 The High School of Horrors 

□ 169 The Black Phoenix 

□ 170 Ragnarok Revisited 

□ 1 71 The Pyramid of Cheops 

□ 1 72 The Mountain of the Master 

□ 1 73 The House that Jack Built 

□ 1 74 Escape from Granite Hall 

□ 1 75 Anatomy of the Body 

□ 176DirtieTrix'sMadMaze 

□ 177ShippeofFooles 

□ 178 The Alien Intruder 

□ 179 The Wizard's Tower 

□ 180 Gamma 1 

□ 181 The Eamon Sewer System 

□ 182 Farmer Brown's Woods 

□ 183 The Boy and the Bard 

□ 184 Quest for Orion 

□ 185 The Body Revisited 

□ 186 Beginners Cave II 

□ 187 Batman! 

□ 188 Encounter: The Bookworm 

□ 189 The Ruins of Belfast 

□ 190 Swift Change at Grimmwax 

□ 191 Enhanced Beginners 's Cave 

□ 192 Mean Streets 

□ 193 The Creature of Rhyl 

□ 194 Attack of the Kretons 

□ 195 The Training Grounds 

□ Dungeon Designer Diskette v7.0 

□ Multi-Disk Supplement (DDD70) 

□ Dungeon Designer Diskette v6.2 

□ Eamon Utilities Diskette 

□ Graphics Main Hall 



Free 

Eamon 

Adventure 

disks 



Use the total number of 
adventures ordered to 
determine how many free 
adventures you get. 



# of disks at $1 

1-9 

10-19 

20-29 

30-39 

40-49 

50-59 

60-69 

70-79 

80-89 

90-99 

100-109 

110-119 

120-129 



# of Free disks 



2 

5 

9 
14 
20 
27 
35 
44 
54 
65 
77 
90 



Complete set of Eamon 

All 212 disks (includes 
all adventures plus designer 
and utility disks.) S120 

Be sure and check the 
boxes of the free disks that 
you want but do not include 
free disks when figuring total 
number of disks ordered. 



□ Send me the Complete set of Eamon for: 



Total nimiber of Adventure disks 



$120.00 
. X SI each = 



If total # of disks ordered is less than 10, add $4 for postage & handling. 

Washington residents add 7.8% sales tax. 



Name 



Address . 
City 



State 



-Zip. 



Country. 
□ Visa ' 



.Phone 



Exp 



Signature . 



COMPUTIST, 33821 E Orville Rd, Eatonville WA 98328 (206) 832-3055 



Find it Fast! Make it Easy! 

Want a quick and easy way to find your favorite softkey, article or play tip 
without having to re-read your entire COMPUTIST library? This is what you 
are looking for: 

The Computist* Super Index! 

The Computist Super Index is a data base listing of all the Soflkeys, Articles, Play Tips, APT's, 
and RDEX inputs printed in Computist magazine. Three colossal indexes with over 5,000 records and 
27,000 entries! (Over 100 records and 500 entries added each issue!) 

With The Computist Super Index, you instantly have the title, issue, page, special requirements, 
bugs, and "type" of softkey ! At the touch of a key, you can search, sort, and print softkeys by program 
name, publisher, or de-protection method! By entering a key word or characters, the location of every 
article, tip, and entry about your topic of interest, is immediately sent to the screen or printer. 

Extra Bonus ! The Computist Super Index includes over 1 ,000 softkeys and tips (hidden within the 
RDEX), not printed in the contents or back-issue listings of Computist! If it is printed in Computist, 
it is listed in The Computist Super Index! (IBM and IVlacIntosh entries included.) 
♦David Hopkins is not connected with COMPUTIST magazine and The Computist Super Index is not a 
product of COMPUTIST or SoftKey Publishing. 

Features 

• Three (index) data bases: Softkeys, Inputs-Articles-Programs, and Play Tips-Advanced Play- 
ing Techniques-Reviews. 

• Over ten fields to search and sort, including: Title, Issue, Page, Distributor, Input Location, 
Softkey Type, Bugs, Author, and more! 

• All RDEX entries are summarized and categorized! Categories include: Articles, Programs, 
Editorials, Queries, Inputs, Listings, Help Wanted's, and others. 

• The Computist Super Index lists virtually everything printed in Computist, from Hardcore Vol- 
ume 1, Number 1, to the present! IBM entries in separate indexes. 

• Softkey 'Type" identifies the exact deprotection techniques used for each softkey! Includes: 
Sector & Block Edits, Modified Copya, Controller, DOS Patch, File Copy, Bootcode Trace, RWTS 
Capture, Hex Dumps, Hardware Copy, etc. 

• Format: Appleworks, DIP, or Text (ASCII). Please note: Since Appleworks screen and printer 
formats are lost when the files are converted to DIP or Text (ASCII), Appleworks is the recommended 
format. 

Computist Super Index 

The Computist Super Index is updated each issue. All orders sent Air Mail. Price includes 
shipping. Hardware requirements: Apple II, II +, He, lie, Ilgs, or compatible, with at least 128K RAM 
for the Appleworks version, 48K for the DIP and Text versions. Not available in MS-DOS format. 
The indexes are broken into 40K segments for the 5.25" version and RAM size less than 256K. Order 
The Computist Super Index today! 

Update Subscriptions 

An Update is a wise investment! An Update Subscription is even better! 

(1 ) Each update contains the entire data base, plus the current issue, and all corrections and revisions. 

(2) You get a new, fully updated, copy of The Computist Super Index with each update, and at half 
of the original index price! 

(3) Each update totally replaces all previous versions! 

(4) Save money, time, and effort with update subscriptions. The more updates ordered, the greater 
the savings! 

An update subscription is four to eight updates, sent every one to four issues. Please note: You 
must purchase the INDEX before you can get an update subscription. 
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How to order: 



(1) Copy order form. 

(2) Mark desired options. 



(3) Complete questions. 

(4) Send with check or money order to: 



David R. Hopkins 

3495 W. Hoye Place 

Denver, CO 80219 



What COMPUTERS are you using? 
What is your RAM SIZE? 



What DATA BASES are you using? 

What WORD PROCESSORS are you using? 

What ISSUE # do you want your Update Subscription to start with? 











Computist Super INDEX (5.25" or 3.5") 


U.S. 
□ SIO.OO 


Foreign 
□ SI 2.00 




Every 
issue 


One every 

2 issues 


One every One every 
3 issues 4 issues 




U.S. (5.25" or 3.5"): □336.20 


□ S28.20 


□ $20.20 □ $21.20 




Foreign (5.25" or 3.5"): □ $49.40 


□ $38.10 


□ $26.80 □ $27.80 




Total Updates: 8 


6 


4 4 




Individual Updates are available for □ $7 (US) or □ $9 (foreign) 




Please specify format, DOS, and disk size by checking one box in each row. 




Format: □ Appleworks 


□ Text(ASCn) □DIP 




DOS: □ ProDOS 


□ DOS 3.3 □ GS/OS 




Disk: □ 5.25" 


□ 3.5" 






Name 




^ 




Address 


Citv 


State 


TXxi 





• Send U.S. funds drawn on U.S. bank. Not available by charge card or COD. Prices subject 
to change without notice. Please make checks payable to: David R. Hopkins 



'^ 



Thank you for your order and support! 
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